CVE-2006-4379

35Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 61%

from disclosure to weapon41 days

Published on NVDSep 8

1st PoC+41d

exploitation probability

61%top 1% of all CVEs

observed exploitation

nono source reports it

3 public exploit(s)

Stack-based buffer overflow in the SMTP Daemon in Ipswitch Collaboration 2006 Suite Premium and Standard Editions, IMail, IMail Plus, and IMail Secure allows remote attackers to execute arbitrary code via a long string located after an '@' character and before a ':' character.

Affected products

n/a · n/a

public PoCs found — 3✓ VexDay Proof

exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/2601 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3264 exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3265

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://secunia.com/advisories/21795 http://securitytracker.com/id?1016803 http://securitytracker.com/id?1016804 https://exchange.xforce.ibmcloud.com/vulnerabilities/28789 http://www.ipswitch.com/support/ics/updates/ics20061.asp http://www.ipswitch.com/support/imail/releases/im20061.asp http://www.securityfocus.com/archive/1/445521/100/0/threaded http://www.securityfocus.com/bid/19885 http://www.vupen.com/english/advisories/2006/3496 http://www.zerodayinitiative.com/advisories/ZDI-06-028.html