CVE-2005-2931

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.

Published: Dec 7, 2005
Updated: Apr 13, 2023
CVE: CVE-2005-2931
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
ipswitch / ipswitch_collaboration_suite	2.0	2.0.x
ipswitch / ipswitch_collaboration_suite	2.01	2.01.x
ipswitch / imail_server	8.20	8.20.x

http://secunia.com/advisories/17863
http://securitytracker.com/id?1015317
http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
http://www.securityfocus.com/bid/15752
http://www.vupen.com/english/advisories/2005/2782

Vulnerability Database

289,697

CVE-2005-2931