As long as the service doesn't show as running then you should be fine. You can't buffer overflow a stopped service AFAIK.
-- Joshua Levitsky, MCSE, CISSP System Engineer http://www.foist.org/ [5957 F27C 9C71 E9A7 274A 0447 C9B9 75A4 9B41 D4D1] ----- Original Message ----- From: "Scott Heath" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 24, 2004 1:33 PM Subject: RE: [IMail Forum] Fw: [Full-Disclosure] Scans for IPSwitch IMail LDAP vuilnerability I tried but it said it couldn't find the right version of the file. That’s the only HF I haven't applied. I'm not running LDAP so do I still need to be worried? -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua Levitsky Sent: Tuesday, February 24, 2004 11:28 AM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [IMail Forum] Fw: [Full-Disclosure] Scans for IPSwitch IMail LDAP vuilnerability Please everyone be sure to patch your IMail 8 installations with the hotfix for the LDAP vulnerability. ----- Original Message ----- From: "3APA3A" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 24, 2004 11:19 AM Subject: [Full-Disclosure] Scans for IPSwitch IMail LDAP vuilnerability > Information was received from Kaspersky Labs, there is increased > activity on TCP/389 (LDAP) port. Analysis of captured packet > demonstrates attempt to exploit IPSwitch IMail LDAP vulnerability. > Packet contains universal reverse shell shellcode. Trojan is installed > on owned host (listens on TCP/21 and pretends to be wu-ftpd). To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.576 / Virus Database: 365 - Release Date: 1/30/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.576 / Virus Database: 365 - Release Date: 1/30/2004 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
