Secunia

Multiple vulnerabilities have been discovered in Ipswitch IMail Server and Ipswitch Collaboration Suite (ICS), which can be exploited by malicious users to compromise a vulnerable system.

The vulnerabilities are caused due to multiple boundary errors in the IMAP service when processing certain "SEARCH" command search keys ("BEFORE", "ON", "SINCE", "SENTBEFORE", "SENTON", "SENTSINCE"). This can be exploited to cause stack-based buffer overflows via overly long, quoted or unquoted arguments passed to the command.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are confirmed in IMail Premium versions 2006.2 and 2006.21. Other versions may also be affected.

Solution
Grant only trusted users access to the IMAP service.

Provided and/or discovered by
Independently discovered by:
* Secunia Research
* ZhenHan Liu, Ph4nt0m Security Team.

Deep Links
Links available in Customer Area