Executive Summary
| Informations | |||
|---|---|---|---|
| Name | CVE-2005-1255 | First vendor Publication | 2005-05-25 |
| Vendor | Cve | Last vendor Modification | 2024-11-20 |
Security-Database Scoring CVSS v3
| Cvss vector : N/A | |||
|---|---|---|---|
| Overall CVSS Score | NA | ||
| Base Score | NA | Environmental Score | NA |
| impact SubScore | NA | Temporal Score | NA |
| Exploitabality Sub Score | NA | ||
| Calculate full CVSS 3.0 Vectors scores | |||
Security-Database Scoring CVSS v2
| Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C) | |||
|---|---|---|---|
| Cvss Base Score | 10 | Attack Range | Network |
| Cvss Impact Score | 10 | Attack Complexity | Low |
| Cvss Expoit Score | 10 | Authentication | None Required |
| Calculate full CVSS 2.0 Vectors scores | |||
Detail
| Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before IMail Server 8.2 Hotfix 2, allow remote attackers to execute arbitrary code via a LOGIN command with (1) a long username argument or (2) a long username argument that begins with a special character. |
Original Source
| Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1255 |
CPE : Common Platform Enumeration
| Type | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 |
SAINT Exploits
| Description | Link |
|---|---|
| IMail IMAP LOGIN special character vulnerability | More info here |
Open Source Vulnerability Database (OSVDB)
| Id | Description |
|---|---|
| 16804 | Ipswitch IMail IMAP LOGIN username Remote Overflow A remote overflow exists in IMail Server. The IMAP service (IMAP4D32.EXE) fails to perform proper bounds checking resulting in a buffer overflow. By passing either an overly long username starting with special characters to the 'LOGIN' command, a remote attacker can cause arbitrary code execution resulting in a loss of integrity. |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2014-01-10 | login buffer overflow attempt RuleID : 1842-community - Revision : 34 - Type : PROTOCOL-IMAP |
| 2014-01-10 | login buffer overflow attempt RuleID : 1842 - Revision : 34 - Type : PROTOCOL-IMAP |
Sources (Detail)
Alert History
| Date | Informations |
|---|---|
| 2024-11-28 23:22:08 |
|
| 2024-11-28 12:06:59 |
|
| 2021-05-04 12:02:55 |
|
| 2021-04-22 01:03:09 |
|
| 2020-05-23 01:36:37 |
|
| 2020-05-23 00:16:30 |
|
| 2014-01-19 21:22:40 |
|
| 2013-05-11 11:24:43 |
|
