• info
• discussion
• exploit
• solution
• references

Ipswitch IMail Server LDAP Buffer Overflow Vulnerability

Ipswitch IMail is an e-mail server that serves clients their mail via a web interface. It runs on Microsoft Windows operating systems.

The IMail LDAP component is prone to a remotely exploitable buffer overflow condition, allowing attackers to execute arbitrary attacker-supplied instructions.

IMail normally runs in the SYSTEM context, meaning that successful exploitation will result in a full compromise of the underlying system.

It should be noted that this condition may also be exploited to trigger a denial of service.