CVE-2005-1255: Buffer Overflow
Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1255?
CVE-2005-1255 is considered to have a high severity due to the potential for remote code execution.
How do I fix CVE-2005-1255?
To fix CVE-2005-1255, update the IMail server to version 8.2 Hotfix 2 or later.
Which versions of Ipswitch products are affected by CVE-2005-1255?
CVE-2005-1255 affects IMail versions 8.12 and 8.13, as well as the Ipswitch Collaboration Suite versions before IMail Server 8.2 Hotfix 2.
Can CVE-2005-1255 be exploited remotely?
Yes, CVE-2005-1255 can be exploited remotely through crafted LOGIN commands.
What types of attacks are possible due to CVE-2005-1255?
CVE-2005-1255 allows attackers to execute arbitrary code on vulnerable systems through stack-based buffer overflows.