Added: 07/27/2007
CVE: CVE-2007-3925
BID: 24962
OSVDB: 36219
IMail is an e-mail server for Windows platforms.
A buffer overflow vulnerability in the IMAP service could allow an authenticated attacker to execute arbitrary commands by sending a specially crafted SEARCH command.
Upgrade to Ipswitch IMail Server version 2006.21.
<http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=563>
Exploit works on Ipswitch IMail Server 2006.1. A valid IMAP login and password are required.
Windows 2000
Windows Server 2003