CVE-1999-1551: Buffer Overflow
Buffer overflow in Ipswitch IMail Service 5.0 allows an attacker to cause a denial of service (crash) and possibly execute arbitrary commands via a long URL.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Ipswitch IMailfrom your environment.Uninstall Ipswitch IMail if the product is not required in your environment to eliminate exposure to the vulnerability.
- Configuration
Stop and disable the Ipswitch IMail Service until a vendor-supplied patch or update addressing the buffer overflow is available.
Ipswitch IMail Service service_enabled = false - Compensating control
Restrict network access to the IMail service using firewall rules or ACLs so only trusted management hosts or necessary peers can reach the service.
- Compensating control
Deploy a web application firewall or reverse proxy in front of the service to block or normalize excessively long URLs and enforce request length limits.
- Operational
Monitor hosts running Ipswitch IMail for service crashes, unusual process activity, or indicators of compromise. If exploitation is suspected, isolate affected hosts and rotate any credentials or keys that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1551?
CVE-1999-1551 has a high severity rating due to its capability to cause denial of service and potential remote code execution.
How do I fix CVE-1999-1551?
To fix CVE-1999-1551, upgrade the Ipswitch IMail Service to a version that is not affected, preferably version 6.1 or later.
What systems are affected by CVE-1999-1551?
CVE-1999-1551 affects Ipswitch IMail versions 5.0 and 6.0.
What type of vulnerability is CVE-1999-1551?
CVE-1999-1551 is classified as a buffer overflow vulnerability.
Can CVE-1999-1551 be exploited remotely?
Yes, CVE-1999-1551 can be exploited remotely through the submission of a long URL.