Vulnerabilities > CVE-2004-0297 - Remote LDAP Daemon Buffer Overflow vulnerability in Ipswitch Imail 8.0.3/8.0.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
COMPLETE Integrity impact
COMPLETE Availability impact
COMPLETE Summary
Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Exploit-Db
description IPSwitch IMail LDAP Daemon Remote Buffer Overflow Exploit. CVE-2004-0297. Remote exploit for windows platform id EDB-ID:157 last seen 2016-01-31 modified 2004-02-27 published 2004-02-27 reporter Johnny Cyberpunk source https://www.exploit-db.com/download/157/ title IPSwitch IMail LDAP Daemon - Remote Buffer Overflow Exploit description IMail LDAP Service Buffer Overflow. CVE-2004-0297. Remote exploit for windows platform id EDB-ID:16824 last seen 2016-02-02 modified 2010-04-30 published 2010-04-30 reporter metasploit source https://www.exploit-db.com/download/16824/ title IMail LDAP Service Buffer Overflow
Metasploit
| description | This exploits a buffer overflow in the LDAP service that is part of the IMail product. This module was tested against version 7.10 and 8.5, both running on Windows 2000. |
| id | MSF:EXPLOIT/WINDOWS/LDAP/IMAIL_THC |
| last seen | 2020-03-23 |
| modified | 2017-07-24 |
| published | 2005-12-26 |
| references | |
| reporter | Rapid7 |
| source | https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/windows/ldap/imail_thc.rb |
| title | IMail LDAP Service Buffer Overflow |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/83017/imail_thc.rb.txt |
| id | PACKETSTORM:83017 |
| last seen | 2016-12-05 |
| published | 2009-11-26 |
| reporter | H D Moore |
| source | https://packetstormsecurity.com/files/83017/IMail-LDAP-Service-Buffer-Overflow.html |
| title | IMail LDAP Service Buffer Overflow |
Saint
| bid | 9682 |
| description | IMail LDAP buffer overflow |
| id | mail_misc_imailldap |
| osvdb | 3984 |
| title | imail_ldap |
| type | remote |