CVE-2007-5094
published 2007-09-26CVE-2007-5094: Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a…
PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
4.36%
90.0th percentile
Heap-based buffer overflow in iaspam.dll in the SMTP Server in Ipswitch IMail Server 8.01 through 8.11 allows remote attackers to execute arbitrary code via a set of four different e-mail messages with a long boundary parameter in a certain malformed Content-Type header line, the string "MIME" by itself on a line in the header, and a long Content-Transfer-Encoding header line.
Affected
5 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| ipswitch | imail | — | — |
| ipswitch | imail | — | — |
| ipswitch | imail | — | — |
| ipswitch | imail | — | — |
| ipswitch | imail | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/39390http://pstgroup.blogspot.com/2007/09/exploitimail-iaspamdll-80x-remote-heap.htmlhttp://www.securityfocus.com/bid/25762https://exchange.xforce.ibmcloud.com/vulnerabilities/36723https://www.exploit-db.com/exploits/4438http://osvdb.org/39390http://pstgroup.blogspot.com/2007/09/exploitimail-iaspamdll-80x-remote-heap.htmlhttp://www.securityfocus.com/bid/25762https://exchange.xforce.ibmcloud.com/vulnerabilities/36723https://www.exploit-db.com/exploits/4438
2007-09-26
Published