Skip to main content
← All vulnerabilities
CVE-2007-5094

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute ar

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line.

Timeline

  1. Public exploit on Exploit-DB

    EDB-4438

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 5

Exploit-DB

pstgroup.blogspot.com

exchange.xforce.ibmcloud.com

securityfocus.com

osvdb.org