Re: [IMail Forum] IMAP4 attack!!!

[Bonno Bloksma]

Hi,   There is a bug in the IMAP protocol in the 8.0x series for which a fix was never released. The fix was only created for the 8.1x and 8.2x releases. Be aware there ARE exploits in the wild taking advantage of this bug. We ran into them as well and as we need IMAP4 I had to upgrade to 8.2x.   So your options are limited to either disable IMAP if that is feasable for you or either upgrade to 8.22.   See my mails in this list with subject "IMAP service stopping" See also http://www.securityfocus.com/archive/1/400543 Groetjes,   Bonno Bloksma ----- Original Message ----- From: Periklis Drakos To: IMail_Forum@list.ipswitch.com Sent: Monday, January 09, 2006 9:19 PM Subject: [IMail Forum] IMAP4 attack!!! Hello guys   Couple of hours ago my Imap4 service hit 100% CPU!!!! I was suspected hack attack....   I stoped the service.. every went back to normal...except the high network flows I observe...Am I compromised?     Any suggestions welcome!! Runing IMAIL 8.05 HF3 in windows 2003 standard   Thanks Periklis Drakos