CVE-2007-3925: ipswitch imail_server

CVSS: 6.5v2.0MediumModified

Published 21-07-2007Last modified 07-08-2024

Vulnerability summary

CVE-2007-3925 is a medium (CVSS 6.5) vulnerability in ipswitch imail_server. EPSS estimates a 84.67% chance of exploitation in the next 30 days, higher than 99.7% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

53/100

0100

High · default modelHow is this calculated?

CVSS score

6.5/10

010

Medium · v2.0 (NVD)

EPSS score

84.67%

0%100%

Critical · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3exploit-database, metasploit

Timeline

21-07-2007
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Multiple buffer overflows in the IMAP service (imapd32.exe) in Ipswitch IMail Server 2006 before 2006.21 allow remote authenticated users to execute arbitrary code via the (1) Search or (2) Search Charset command.

CVSS metrics

1 score · 1 source · 1 version

v2.06.5

EPSS trend

Probability

84.67%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 84.67% on 20-09-2026

20-09-202620-10-2026

EPSS score

84.67%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

exploit-databaseremotewindowsVerified
Ipswitch IMail Server - IMAP SEARCH Buffer Overflow (Metasploit)
Maturity: weaponized
exploit-databaseremotewindowsVerified
IPSwitch IMail Server 2006 - SEARCH Remote Stack Overflow
Maturity: weaponized
MetasploitremoteUnverified
Ipswitch IMail IMAP SEARCH Buffer Overflow
exploit/windows/imap/ipswitch_search
Maturity: poc

Weaknesses

CWE · root cause

CWE-119Improper Restriction of Operations within the Bounds of a Memory BufferThe product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Affected systems

Ipswitch2 products

imail_server≤ 2006.2
ipswitch_collaboration_suite≤ 2006.2

1 vendor · 2 products

References

8 links

www.vupen.com/english/advisories/2007/2574VDB EntryX Refsource VUPEN
www.securityfocus.com/bid/24962VDB EntryX Refsource BIDPatch
labs.idefense.com/intelligence/vulnerabilities/display.php?id=563Third Party AdvisoryX Refsource IDEFENSE
www.securitytracker.com/id?1018419VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/35496VDB EntryX Refsource XF
exchange.xforce.ibmcloud.com/vulnerabilities/35500VDB EntryX Refsource XF
docs.ipswitch.com/IMail%202006.21/ReleaseNotes/IMail_RelNotes.htmX Refsource CONFIRMPatch
secunia.com/advisories/26123Third Party AdvisoryX Refsource SECUNIAVendor Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities