VULNERABILITY INTELLIGENCE

CVE-2007-2795

CVSS score9 HIGH
EPSS probability24.45%
CISA KEVNot currently listed
Published2009-01-27
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:C/I:C/A:C

Description

Multiple buffer overflows in Ipswitch IMail before 2006.21 allow remote attackers or authenticated users to execute arbitrary code via (1) the authentication feature in IMailsec.dll, which triggers heap corruption in the IMail Server, or (2) a long SUBSCRIBE IMAP command, which triggers a stack-based buffer overflow in the IMAP Daemon.

Weakness classification

  • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

Primary references