[Full-disclosure] MailEnable v2.37 APPEND exploit

Attached is another exploit for the MailEnable Pro/Ent = 2.37 including the latest. The vulnerability is a bog-standard stack based overflow in the call at offset 0x00417CD6 MEIMAPS.exe, v2.37. --------------------------------------------------------------------------- [email protected]...

CVE-2006-6291

Stack overflow in the IMAP module MEIMAPS.EXE in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service crash via a long argument containing asterisk and ?...

CVE-2006-6291

CVE-2006-6291 describes a stack overflow in MailEnable’s IMAP module (MEIMAPS.EXE) affecting MailEnable Professional 1.6–1.83 and 2.0–2.33, and MailEnable Enterprise 1.1–1.40 and 2.0–2.33. An authenticated remote user could crash the service by sending a long argument containing * and ? character...