CVE-2005-2931

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-07 · updated 2026-06-16

Description

Format string vulnerability in the SMTP service in IMail Server 8.20 in Ipswitch Collaboration Suite (ICS) before 2.02 allows remote attackers to execute arbitrary code via format string specifiers to the (1) EXPN, (2) MAIL, (3) MAIL FROM, and (4) RCPT TO commands.

Affected products

Ipswitch Imail Server: 8.20
Ipswitch Collaboration Suite: 2.0, 2.01

References

http://secunia.com/advisories/17863
http://securitytracker.com/id?1015317
http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
http://www.securityfocus.com/bid/15752
http://www.vupen.com/english/advisories/2005/2782
http://secunia.com/advisories/17863
http://securitytracker.com/id?1015317
http://www.idefense.com/application/poi/display?id=346&type=vulnerabilities
http://www.ipswitch.com/support/imail/releases/imail_professional/im822.asp
http://www.securityfocus.com/bid/15752
http://www.vupen.com/english/advisories/2005/2782

Get alerted when CVE-2005-2931 or the next vulnerability affects your stack