CVE-2006-4379: ipswitch imail_plus

EPSS trend

Probability

60.86%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

-0.27 pp

From 61.13% on 20-09-2026

20-09-202620-10-2026

EPSS score

60.86%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
Ipswitch IMail Server 2006 / 8.x - 'RCPT' Remote Stack Overflow
Maturity: weaponized
exploit-databaseremotewindowsVerified
Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow
Maturity: weaponized
exploit-databaseremotewindowsVerified
Ipswitch IMail Server 8.10-8.12 - RCPT TO Remote Buffer Overflow (Metasploit)
Maturity: weaponized

References

10 links

secunia.com/advisories/21795Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/archive/1/445521/100/0/threadedMailing ListX Refsource BUGTRAQ
securitytracker.com/id?1016804VDB EntryX Refsource SECTRACK
www.securityfocus.com/bid/19885VDB EntryX Refsource BIDPatch
www.ipswitch.com/support/imail/releases/im20061.aspX Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/28789VDB EntryX Refsource XF
www.ipswitch.com/support/ics/updates/ics20061.aspX Refsource CONFIRMPatch
www.zerodayinitiative.com/advisories/ZDI-06-028.htmlX Refsource MISCPatch
securitytracker.com/id?1016803VDB EntryX Refsource SECTRACK
www.vupen.com/english/advisories/2006/3496VDB EntryX Refsource VUPEN

Related vulnerabilities

CVE-2007-1637ipswitchimail+35.64%19y ago23-03-2007 22:00Multiple buffer overflows in the IMAILAPILib ActiveX control (IMailAPI.dll) in Ipswitch IMail Server before 2006.2 allow remote attackers to execute arbitrary code via the (1) WebConnect and (2) Connect members in the (a) IMailServer control; (3) Sync3 and (4) Init3 members in the (b) IMailLDAPService control; and the (5) SetReplyTo member in the (c) IMailUserCollection control.CVE-2007-3925ipswitchimail_server+184.67%19y ago21-07-2007 00:00Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.CVE-2007-3959ipswitchimserver+16.46%19y ago24-07-2007 18:00The IM Server (aka IMserve or IMserver) 2.0.5.30 and probably earlier in Ipswitch Instant Messaging before 2.07 in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (daemon crash) via certain data to TCP port 5179 that overwrites a destructor, as reachable by the (1) DoAttachVideoSender, (2) DoAttachVideoReceiver, (3) DoAttachAudioSender, and (4) DoAttachAudioReceiver functions.CVE-2007-3927ipswitchimail_server+121.89%19y ago21-07-2007 00:00Multiple buffer overflows in Ipswitch IMail Server 2006 before 2006.21 (1) allow remote attackers to execute arbitrary code via unspecified vectors in Imailsec and (2) allow attackers to have an unknown impact via an unspecified vector related to "subscribe."CVE-2005-2931ipswitchimail_server+14.74%20y ago07-12-2005 01:00Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.CVE-2005-2923ipswitchimail_server+110.82%20y ago07-12-2005 01:00The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to cause a denial of service (crash) via a long argument to the LIST command, which causes IMail Server to reference invalid memory.

All vulnerabilities inimail_plus imail_secure_server ipswitch_collaboration_suite

CVE-2006-4379: ipswitch imail_plus

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References