Ipswitch IMail Server/Collaboration Suite ActiveX¿Ø¼þ¶à¸ö»º³åÇøÒç³ö©¶´

·¢²¼ÈÕÆÚ£º2007-03-07
¸üÐÂÈÕÆÚ£º2007-03-08

ÊÜÓ°Ïìϵͳ£º

Ipswitch IMail 2006
Ipswitch Ipswitch Collaboration Suite Standard Edition 2006

²»ÊÜÓ°Ïìϵͳ£º

Ipswitch IMail Premium 2006.2
Ipswitch IMail Plus 2006.2
Ipswitch IMail 2006.2
Ipswitch Ipswitch Collaboration Suite Standard 2006.2

ÃèÊö£º

---

BUGTRAQ  ID: 22852

Ipswitch IMail ServerÊÇIpswitchЭ×÷×é¼þÖÐÀ¦°óµÄÒ»¸öÓʼþ·þÎñÆ÷¡£

IMail ServerËù´øһЩActiveX¿Ø¼þʵÏÖÉÏ´æÔÚ»º³åÇøÒç³ö©¶´£¬Ô¶³Ì¹¥»÷Õß¿ÉÄÜÀûÓÃÕâЩ©¶´Í¨¹ýÓÕʹÓû§·ÃÎʶñÒâÍøÒ³À´¿ØÖÆÓû§¿Í»§¶Ë»úÆ÷¡£

²»°²È«µÄstrcpyºÍwsprintfµ÷ÓÃËùµ¼ÖµĶà¸ö¶ÑÒç³öºÍÕ»Òç³ö¿ÉÄÜÔÊÐí´úÂëÖ´ÐС£ÓЩ¶´¿Ø¼þµÄÏêϸÐÅÏ¢ÈçÏ £º

ProgID: IMAILAPILib.IMailServer
CLSID: 302397C2-8501-11D4-8D29-00010245C51E
targetFile: C:\Program Files\Ipswitch\IMail\IMailAPI.dll
memberName: WebConnect
memberName: Connect

ProgID: IMAILAPILib.IMailLDAPService
CLSID: 889558D4-CE9A-4A1B-B88A-AF7774A80E25
targetFile: C:\Program Files\Ipswitch\IMail\IMailAPI.dll
memberName: Sync3
memberName: Init3

ProgID: IMAILAPILib.IMailUserCollection
CLSID: 302397D6-8501-11D4-8D29-00010245C51E
targetFile: C:\Program Files\Ipswitch\IMail\IMailAPI.dll
memberName: SetReplyTo

<*À´Ô´£ºiDEFENSE
  
  Á´½Ó£ºhttp://secunia.com/advisories/24422/
        http://support.ipswitch.com/kb/IM-20070305-JH01.htm
        http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=487
*>

½¨Ò飺

---

ÁÙʱ½â¾ö·½·¨£º

* ΪÒÔÏÂCLSIDÉèÖÃkill-bit£º

302397C2-8501-11D4-8D29-00010245C51E
302397D6-8501-11D4-8D29-00010245C51E
889558D4-CE9A-4A1B-B88A-AF7774A80E25

³§É̲¹¶¡£º

Ipswitch
--------
Ä¿Ç°³§ÉÌÒѾ­·¢²¼ÁËÉý¼¶²¹¶¡ÒÔÐÞ¸´Õâ¸ö°²È«ÎÊÌ⣬Çëµ½³§É̵ÄÖ÷Ò³ÏÂÔØ£º

ftp://ftp.ipswitch.com/Ipswitch/Product_Downloads/ICS_Standard.exe