[email protected]CVE-2005-1014

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-1014

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-1014

buffer overflow

mailenable

imap

remote code execution

nvd

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.6%

JSON

Buffer overflow in the IMAP service for MailEnable Enterprise 1.04 and earlier and Professional 1.54 allows remote attackers to execute arbitrary code via a long AUTHENTICATE command.

CPENameOperatorVersion
mailenable:mailenable_professionalmailenable mailenable professionaleq1.52
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.04
mailenable:mailenable_professionalmailenable mailenable professionaleq1.5
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.0
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.02
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.01
mailenable:mailenable_professionalmailenable mailenable professionaleq1.51
mailenable:mailenable_professionalmailenable mailenable professionaleq1.54
mailenable:mailenable_professionalmailenable mailenable professionaleq1.53
mailenable:mailenable_enterprisemailenable mailenable enterpriseeq1.03

CPE	Name	Operator	Version
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.52
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.04
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.5
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.0
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.02
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.01
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.51
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.54
mailenable:mailenable_professional	mailenable mailenable professional	eq	1.53
mailenable:mailenable_enterprise	mailenable mailenable enterprise	eq	1.03

References

lists.grok.org.uk/pipermail/full-disclosure/2005-April/033123.html

secunia.com/advisories/14812

securitytracker.com/id?1013637

www.mailenable.com/hotfix/

www.securityfocus.com/bid/12995

exchange.xforce.ibmcloud.com/vulnerabilities/19947

8.1 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.065 Low

EPSS

Percentile

93.6%

JSON

Related for CVE-2005-1014

nessus1