CVE-2005-2923: Input Validation

Published Dec 7, 2005

Updated

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory.

Affected Software

3 affected components

Ipswitch Ipswitch Collaboration Suite=2.0

Ipswitch Ipswitch Collaboration Suite=2.01

Ipswitch IMail Server=8.20

Remediation

Patch Available

http://www.idefense.com/application/poi/display?id=347&type=vulnerabilities

Event History

Dec 7, 2005

CVE Published

01:03 AM

CVE Published

via MITRE·06:00 AM

Data Sourced

via MITRE·06:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-2923?

CVE-2005-2923 is categorized as a denial of service vulnerability that can crash the IMail server.

How do I fix CVE-2005-2923?

To mitigate CVE-2005-2923, upgrade to the latest version of the Ipswitch Collaboration Suite or IMail Server that addresses this vulnerability.

What systems are affected by CVE-2005-2923?

CVE-2005-2923 affects Ipswitch Collaboration Suite versions 2.0 and 2.01, as well as IMail Server version 8.20.

What causes the vulnerability identified by CVE-2005-2923?

CVE-2005-2923 is caused by the IMAP server's inability to handle long arguments to the LIST command, leading to referencing invalid memory.

Can CVE-2005-2923 be exploited remotely?

Yes, CVE-2005-2923 can be exploited remotely by attackers to trigger a denial of service.