[security-alerts] FW: [SA21795] Ipswitch IMail Server SMTP Service Unspecified Vulnerability

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> TITLE:
> Ipswitch IMail Server SMTP Service Unspecified Vulnerability
> 
> SECUNIA ADVISORY ID:
> SA21795
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/21795/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Ipswitch Collaboration Suite 2006
> http://secunia.com/product/8652/
> IMail Secure Server 2006
> http://secunia.com/product/8651/
> IMail Server 2006
> http://secunia.com/product/8653/
> 
> DESCRIPTION:
> A vulnerability has been reported in IMail Server, which can be
> exploited by malicious people to compromise a vulnerable system.
> 
> The vulnerability is caused due to an unspecified error in the SMTP
> daemon and can be exploited to execute arbitrary code.
> 
> The vulnerability is reported in the following versions:
> * Ipswitch Collaboration 2006 Suite Premium Edition
> * Ipswitch Collaboration 2006 Suite Standard Edition
> * IMail
> * IMail Plus
> * IMail Secure
> 
> SOLUTION:
> Update to version 2006.1.
> 
> Ipswitch Collaboration Suite Premium Edition:
> ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/ICS_Premium.exe
> 
> Ipswitch Collaboration Suite Standard Edition:
> ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/ICS_Standard.exe
> 
> IMail:
> ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/IMail.exe
> 
> IMail Plus:
> ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/IMail_Plus.exe
> 
> IMail Secure:
> ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/IMail_Secure.exe
> 
> PROVIDED AND/OR DISCOVERED BY:
> Reported by the vendor.
> 
> ORIGINAL ADVISORY:
> http://www.ipswitch.com/support/ics/updates/ics20061.asp
> http://www.ipswitch.com/support/imail/releases/im20061.asp
> 
>