This application requires Javascript for optimal performance.

IA.Webmail.Server.Stack.Overflow

Alias(es)

IA.Webmail.Server.Stack.Overflow.B

Release Date

Sep 16, 2005

Severity

critical

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Description

This indicates a possible exploit of a buffer-overflow vulnerability in the IA WebMail Server.

This vulnerability is caused by an error when the vulnerable software handles a maliciously crafted HTTP GET request. It allows remote attackers to execute arbitrary code by sending a specially crafted HTTP request.

Affected Products

True North Software IA WebMail Server 3.1 and 3.0


Recommended Actions

Apply the appropriate patch from the vendor if available.

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2003-1192

Reference/s

http://www.securityfocus.com/bid/8965 (BugTraq)

Reference: VID-10899