IPSwitch IMail Server IMail Client Buffer Overflow
1 Nov. 2007
Summary
The IMail Client "is provided for those who are administering IMail Server on the NT workstation on which IMail Server is installed. It is useful for reading the 'root' mailbox, working with seldom-used accounts, and testing.". Secunia Research has discovered a vulnerability in the IMail Client, which potentially can be exploited by malicious people to compromise a user's system.
Vulnerable Systems:
* IMail Client version 9.22 included with IPSwitch IMail Server version 2006.22
The vulnerability is caused due to a boundary error within the IMail Client when processing emails containing multipart MIME data. This can be exploited to cause a data segment-based buffer overflow via an overly long "boundary" parameter (more than 212 bytes).
Solution:
The vendor recommends users to delete the IMail Client application, which will be removed from the next major release of the IPSwitch IMail Server.
Time Table:
24/09/2007 - Vendor notified.
25/09/2007 - Vendor response.
30/10/2007 - Public disclosure.
