CVE-2007-3925

Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.

CVSS v2.0

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

84.67% chance of exploitation in the next 30 days, 100th percentile

Published

2007-07-21

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/ipswitch_search.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16487
• https://www.exploit-db.com/exploits/4223

References

• CVE Record
• NVD entry

Related

• CVE-2007-3913
• CVE-2007-3927
• CVE-2007-3909
• CVE-2007-3932
• CVE-2007-3901
• CVE-2007-3933