CVE-2005-2931
First published: Wed Dec 07 2005(Updated: )
Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ipswitch Ipswitch Collaboration Suite | =2.0 | |
| Ipswitch Ipswitch Collaboration Suite | =2.01 | |
| Ipswitch IMail Secure Server | =8.20 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
- http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
- http://www.securityfocus.com/bid/15752
- http://secunia.com/advisories/17863
- http://securitytracker.com/id?1015317
- http://www.vupen.com/english/advisories/2005/2782
Frequently Asked Questions
What is the severity of CVE-2005-2931?
CVE-2005-2931 is classified as a high severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2005-2931?
To fix CVE-2005-2931, update to a patched version of IMail Server or Ipswitch Collaboration Suite that addresses this vulnerability.
What are the affected versions for CVE-2005-2931?
CVE-2005-2931 affects Ipswitch Collaboration Suite versions 2.0 and 2.01, as well as IMail Server version 8.20.
Can CVE-2005-2931 be exploited remotely?
Yes, CVE-2005-2931 can be exploited remotely via certain SMTP commands with crafted input.
What types of commands are involved in CVE-2005-2931?
The commands involved in CVE-2005-2931 include EXPN, MAIL, MAIL FROM, and RCPT TO.
- agent/references
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ipswitch
- canonical/ipswitch ipswitch collaboration suite
- version/ipswitch ipswitch collaboration suite/2.0
- version/ipswitch ipswitch collaboration suite/2.01
- canonical/ipswitch imail secure server
- version/ipswitch imail secure server/8.20