MailEnable is a mail server for Windows platforms. The standard edition supports the SMTP and POP3 protocols. MailEnable Professional and MailEnable Enterprise also support IMAP and HTTPMail.
MailEnable's IMAP service is affected by a buffer overflow condition in the handling of W3C logging. This could allow authenticated users to execute arbitrary commands.
Exploit works on MailEnable Professional 1.6. A valid IMAP user name and password are required.
Windows 2000 / Windows XP
Windows Server 2003