Thanks for taking the initiative to follow up on this, Eric.  Much
appreciated!

Darin.


----- Original Message ----- 
From: "Eric Shanbrom [Ipswitch]" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, March 10, 2005 11:07 PM
Subject: Re: [IMail Forum] Ipswitch Collaboration Suite IMAP EXAMINE Buffer
Overflow Vulnerability


After some testing we have determined that this was introduced in 8.1 and
version 8.05 is not affected. It was also mis-communicated about the fix. It
was fixed in v 8.14 HF1. Anyone running 8.1x is entitled to the patch to
8.15 so go get it to be safe. As well as HF1 to 8.15. See out patches and
upgrade page...
http://ipswitch.com/support/imail/releases/imail_professional/index.html

Eric S
----- Original Message ----- 
From: "Darin Cox" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Thursday, March 10, 2005 6:42 PM
Subject: Re: [IMail Forum] Ipswitch Collaboration Suite IMAP EXAMINE Buffer
Overflow Vulnerability


> Good to know...thanks, Randy!.
>
> Darin.
>
>
> ----- Original Message ----- 
> From: "Randy Juber" <[EMAIL PROTECTED]>
> To: <[email protected]>
> Sent: Thursday, March 10, 2005 6:13 PM
> Subject: RE: [IMail Forum] Ipswitch Collaboration Suite IMAP EXAMINE
> Buffer
> Overflow Vulnerability
>
>
> http://securityfocus.com/bid/12780
>
> They have a better list of what and what is not affected.
>
> Pretty much IMail 5.0.x to 8.15 is affected, the only one not, is 8.15
> HF1. Hope this helps.
>
> -RJ
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of E. Shanbrom
> (Ipswitch)
> Sent: Thursday, March 10, 2005 2:51 PM
> To: [email protected]
> Subject: Re: [IMail Forum] Ipswitch Collaboration Suite IMAP EXAMINE
> Buffer Overflow Vulnerability
>
> I can't say that it is or not. There were some major changes to the IMAP
> service in the 8.1 release that might have introduced this issue. The
> last
> buffer over-run was unique to v 8.1x and didn't effect prior versions
>
> Eric S
> ----- Original Message ----- 
> From: "Mike Biddle" <[EMAIL PROTECTED]>
> To: <[email protected]>
> Sent: Thursday, March 10, 2005 5:30 PM
> Subject: Re: [IMail Forum] Ipswitch Collaboration Suite IMAP EXAMINE
> Buffer
> Overflow Vulnerability
>
>
>> > Are versions prior to 8.13 vulnerable?  Specifically, is 8.05
> vulnerable?
>> >
>> > Darin.
>> >
>>
>> If you read the article, it says that is likely.
>>
>>
>> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
>> List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to