Added: 12/03/2005
CVE: CVE-2005-3155
BID: 15006
OSVDB: 19842
MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail.
MailEnable’s IMAP service is affected by a buffer overflow condition in the handling of W3C logging. This could allow authenticated users to execute arbitrary commands.
Upgrade to MailEnable Professional 1.7 or MailEnable Enterprise 1.1 with all needed hotfixes.
<http://secunia.com/advisories/17010>
Exploit works on MailEnable Professional 1.6. A valid IMAP user name and password are required.
Windows 2000 / Windows XP
Windows Server 2003