Back to CVE Browser

CVE-2004-0297

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0080%

EPSS Percentile4.27th

PublishedNov 23, 2004

Last ModifiedApr 16, 2026

Vulnerability Description

Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.

Affected Platforms (CPE)

📦

Ipswitch

Imail

= 8.0.3

📦

Ipswitch

Imail

= 8.0.5

References & Advisories

🔗 http://www.idefense.com/application/poi/display?id=74

🔗 http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html

🔗 http://www.kb.cert.org/vuls/id/972334

🔗 http://www.osvdb.org/3984

🔗 http://www.securityfocus.com/bid/9682

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/15243

🔗 http://www.idefense.com/application/poi/display?id=74

🔗 http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html

Related Vulnerabilities

CVE-2005-125510.0

Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other v...

CVE-1999-104610.0

Buffer overflow in IMonitor in IMail 5.0 allows remote attackers to cause a denial of service, and possibly execute arbitrary comm...

CVE-2002-077710.0

Buffer overflow in the LDAP component of Ipswitch IMail 7.1 and earlier allows remote attackers to execute arbitrary code via a lo...

CVE-2005-125610.0

Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versio...