CVE-2007-3925
Ipswitch IMail Server < 2006.21 - Authenticated Remote Code Execution via IMAP Search Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-3925.
PoCs published by Metasploit, ZhenHan.Liu, MC, including Metasploit module exploits/windows/imap/ipswitch_search.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in Ipswitch IMail Server 2006.1 via the IMAP SEARCH command. It sends an overly long string to overwrite the buffer and execute arbitrary code, requiring the target user to have at least one message.
Description
Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in Ipswitch IMail Server 2006.1 via the IMAP SEARCH command. It sends an overly long string to overwrite the buffer and execute arbitrary code, requiring the target user to have at least one message.
This exploit targets a stack overflow vulnerability in Ipswitch IMail Server 2006 IMAP SEARCH command. It leverages a buffer overflow in the handling of the SEARCH command to execute arbitrary shellcode, providing remote code execution.
This Metasploit module exploits a stack buffer overflow in Ipswitch IMail Server 2006.1 via the IMAP SEARCH command. It sends a crafted payload to overwrite the buffer and execute arbitrary code, requiring an authenticated IMAP user with at least one message.