Lucene search

[email protected]CVE-2008-1275

HistoryMar 10, 2008 - 11:44 p.m.

CVE-2008-1275

2008-03-1023:44:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

cve

2008

1275

smtp

service

vulnerabilities

mailenable

denial of service

crash

nvd

7.7 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.035 Low

EPSS

Percentile

91.5%

JSON

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.

CPENameOperatorVersion
mailenable:mailenable_professionalmailenable mailenable professionalle3.0
mailenable:mailenable_standardmailenable mailenable standardeq*
mailenable:mailenable_enterprisemailenable mailenable enterprisele3.0

CPE	Name	Operator	Version
mailenable:mailenable_professional	mailenable mailenable professional	le	3.0
mailenable:mailenable_standard	mailenable mailenable standard	eq	*
mailenable:mailenable_enterprise	mailenable mailenable enterprise	le	3.0

References

secunia.com/advisories/29300

www.mailenable.com/hotfix/

www.securityfocus.com/bid/28154

www.vupen.com/english/advisories/2008/0800/references

exchange.xforce.ibmcloud.com/vulnerabilities/41083

www.exploit-db.com/exploits/5235

7.7 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.035 Low

EPSS

Percentile

91.5%

JSON

Related for CVE-2008-1275

prion1 cvelist1