CVE-2004-0297

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Buffer overflow in the Lightweight Directory Access Protocol (LDAP) daemon (iLDAP.exe 3.9.15.10) in Ipswitch IMail Server 8.03 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via an LDAP message with a large tag length.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.idefense.com/application/poi/display?id=74
http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html
http://www.kb.cert.org/vuls/id/972334Third Party Advisory, US Government Resource
http://www.osvdb.org/3984
http://www.securityfocus.com/bid/9682Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15243
http://www.idefense.com/application/poi/display?id=74
http://www.ipswitch.com/support/imail/releases/imail_professional/im805HF2.html
http://www.kb.cert.org/vuls/id/972334Third Party Advisory, US Government Resource
http://www.osvdb.org/3984
http://www.securityfocus.com/bid/9682Exploit, Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/15243

Timeline

Published: Nov 23, 2004
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2004

CVE-2004-02985.0CesarFTP 0.99e allows remote attackers to cause a denial of service (CPU consumption) via a long RETR parameter.CVE-2004-02992.1Buffer overflow in smallftpd 0.99 allows local users to cause a denial of service (crash) via an FTP request with a large number of "/" (sla CVE-2004-030010.0SQL injection vulnerability in Online Store Kit 3.0 allows remote attackers to inject arbitrary SQL and gain unauthorized access via (1) the CVE-2004-03016.8Cross-site scripting (XSS) vulnerability in more.php for Online Store Kit 3.0 allows remote attackers to inject arbitrary HTML via the id pa CVE-2004-03025.0Directory traversal vulnerability in OWLS 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the (1) file parameter i CVE-2004-03035.0OWLS 1.0 allows remote attackers to retrieve arbitrary files via absolute pathnames in (1) the file parameter in /glossaries/index.php, (2) CVE-2004-030410.0SQL injection vulnerability in browse_items.asp in WebCortex WebStores 2000 6.0 allows remote attackers to gain unauthorized access and exec CVE-2004-03056.8Cross-site scripting (XSS) vulnerability in error.asp in WebCortex WebStores 2000 6.0 allows remote attackers to execute arbitrary script as CVE-2004-03065.0Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS 15600 before 1.3(0) enable TFTP service on CVE-2004-03075.0Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), and ONS 15454 SD before 4.1(3) allows remote attackers to cause a denial of service CVE-2004-030810.0Unknown vulnerability in Cisco ONS 15327 before 4.1(3), ONS 15454 before 4.6(1), ONS 15454 SD before 4.1(3), and Cisco ONS15600 before 1.3(0 CVE-2004-030910.0Stack-based buffer overflow in the SMTP service support in vsmon.exe in Zone Labs ZoneAlarm before 4.5.538.001, ZoneLabs Integrity client 4.