Buffer overflow

2008-03-1023:44:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

Low

0.169 Low

EPSS

Percentile

96.1%

JSON

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

CPENameOperatorVersion
mailenable_enterprisele3.13
mailenable_professionalle3.13

CPE	Name	Operator	Version
	mailenable_enterprise	le	3.13
	mailenable_professional	le	3.13

References

aluigi.altervista.org/adv/maildisable-adv.txt

secunia.com/advisories/29277

securityreason.com/securityalert/3724

www.securityfocus.com/archive/1/489270/100/0/threaded

www.securityfocus.com/bid/28145

www.securitytracker.com/id?1019565

www.vupen.com/english/advisories/2008/0799/references

exchange.xforce.ibmcloud.com/vulnerabilities/41058

www.exploit-db.com/exploits/5249