Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in the (b) IMailLDAPService control; and the (5) SetReplyTo member in the (c) IMailUserCollection control.

The remote host is running Ipswitch Collaboration Suite / IMail, commercial messaging and collaboration suites for Windows. According to its banner, the version of Ipswitch Collaboration Suite / IMail installed on the remote host has several unspecified buffer overflows in various service components as well as one in an ActiveX control.  An attacker may be able to leverage these issues to crash the affected service or execute arbitrary code remotely by default with LOCAL SYSTEM privileges.

The remote host is running Ipswitch Collaboration Suite / IMail, commercial messaging and collaboration suites for Windows. 

According to its banner, the version of Ipswitch Collaboration Suite / IMail installed on the remote host has several unspecified buffer overflows in various service components and ActiveX controls.  An attacker may be able to leverage these issues to crash the affected service or even to execute arbitrary code remotely, by default with LOCAL SYSTEM privileges.

ID	Name	Product	Family	Severity
3938	Ipswitch IMail Server < 2006.2 Multiple Overflows	Nessus Network Monitor	POP Server	medium
3937	Ipswitch IMail Server < 2006.2 Multiple Overflows	Nessus Network Monitor	IMAP Servers	medium
3936	Ipswitch IMail Server < 2006.2 Multiple Overflows	Nessus Network Monitor	SMTP Servers	medium
24782	Ipswitch IMail Server < 2006.2 Multiple Remote Overflows	Nessus	Windows	high

Detections

Analytics

CVE-2007-1637

critical

Tenable Plugins

medium

medium

medium

high