Secunia

FistFuXXer has reported a vulnerability in Ipswitch IMail Server/Collaboration Suite, which can be exploited by malicious users to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the handling of the IMAP FETCH command. This can be exploited to cause a buffer overflow, which crashes the server and allows arbitrary code execution via an overly long argument.

The vulnerability has been reported in the following versions:
* Ipswitch Collaboration Suite 2006 Premium Edition
* Ipswitch Collaboration Suite 2006 Standard Edition
* IMail Secure Server 2006
* IMail Server 2006

Solution
Update to version 2006.03.
Further details available in Customer Area

Provided and/or discovered by
Manuel Santamarina Suarez (FistFuXXer).

Changelog
Further details available in Customer Area

Original Advisory
Ipswitch:
http://www.ipswitch.com/support/ics/updates/ics200603prem.asp
http://www.ipswitch.com/support/ics/updates/ics200603stan.asp
http://www.ipswitch.com/support/imail/releases/imsec200603.asp
http://www.ipswitch.com/support/imail/releases/im200603.asp

3Com's Zero Day Initiative:
http://www.zerodayinitiative.com/advisories/ZDI-06-003.html

Deep Links
Links available in Customer Area