Lucene search

[email protected]CVE-2005-1013

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1013

2005-05-0204:00:00

[email protected]

web.nvd.nist.gov

cve-2005-1013

mailenable

smtp

denial of service

server crash

ehlo command

unicode

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.9%

JSON

The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.

Affected configurations

NVD

Node

mailenablemailenable_enterpriseMatch1.00

mailenablemailenable_enterpriseMatch1.01

mailenablemailenable_enterpriseMatch1.02

mailenablemailenable_enterpriseMatch1.03

mailenablemailenable_enterpriseMatch1.04

mailenablemailenable_professionalMatch1.5

mailenablemailenable_professionalMatch1.51

mailenablemailenable_professionalMatch1.52

mailenablemailenable_professionalMatch1.53

mailenablemailenable_professionalMatch1.54

CPENameOperatorVersion
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.00
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.01
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.02
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.03
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.04
mailenable:mailenable_professionalmailenable mailenable professionaleq1.5
mailenable:mailenable_professionalmailenable mailenable professionaleq1.51
mailenable:mailenable_professionalmailenable mailenable professionaleq1.52
mailenable:mailenable_professionalmailenable mailenable professionaleq1.53
mailenable:mailenable_professionalmailenable mailenable professionaleq1.54

CPE	Name	Operator	Version
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.00
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.01
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.02
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.03
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.04
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.5
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.51
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.52
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.53
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.54

References

marc.info/?l=bugtraq&m=111273637518494&w=2

secunia.com/advisories/14812

securitytracker.com/id?1013637

www.mailenable.com/hotfix/

www.osvdb.org/15232

www.securiteam.com/windowsntfocus/5HP031PFFG.html

www.securityfocus.com/bid/12994

exchange.xforce.ibmcloud.com/vulnerabilities/19948

exchange.xforce.ibmcloud.com/vulnerabilities/19973

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.9%

JSON

Related for CVE-2005-1013

cvelist1 nvd1 nessus1