CVE-2005-1249: Medium severity Ipswitch Ipswitch Collaboration Suite vulnerability

Published May 25, 2005

Updated

The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) via an LSUB command with a large number of null characters, which causes an infinite loop.

Affected Software

1 affected component

Ipswitch Ipswitch Collaboration Suite

Remediation

Patch Available

http://www.ipswitch.com/support/imail/releases/imail_professional/im82hf2.html

Event History

May 25, 2005

CVE Published

04:00 AM

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1249?

CVE-2005-1249 is considered a denial of service vulnerability that can lead to significant CPU consumption.

How do I fix CVE-2005-1249?

To mitigate CVE-2005-1249, it is recommended to update to a patched version of the Ipswitch Collaboration Suite.

What software is affected by CVE-2005-1249?

CVE-2005-1249 affects the Ipswitch Collaboration Suite, specifically its IMAP daemon (IMAPD32.EXE).

Can CVE-2005-1249 be exploited remotely?

Yes, CVE-2005-1249 can be exploited remotely by attackers using an LSUB command with a large number of null characters.

What type of attack does CVE-2005-1249 enable?

CVE-2005-1249 enables a denial of service attack that results in the IMAP daemon entering an infinite loop.