ME020567: MailEnable webmail cross-site scripting vulnerability CVE-2012-0389

ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...

MailEnable Webmail Cross Site Scripting

ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...

MailEnable XSS Vulnerability (Jan 2012) - Active Check

MailEnable is prone to a cross-site scripting XSS vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

MailEnable Webmail - Cross-Site Scripting

ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor contact: 2012-01-04 09:49:36 UTC Vendor...

MailEnable Webmail - Cross-Site Scripting

MailEnable Webmail - Cross-Site Scripting ME020567: MailEnable webmail cross-site scripting vulnerability CWE-79 References: CVE-2012-0389 Discovered by: Sajjad Pourali, Narendra Shinde and Shahab NamaziKhah Vendor advisory: http://www.mailenable.com/kb/Content/Article.asp?ID=me020567 Vendor...

MailEnable 6.02 - 'ForgottonPassword.aspx' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51401/info MailEnable is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

MailEnable 6.02 - ForgottonPassword.aspx Cross-Site Scripting

MailEnable 6.02 - ForgottonPassword.aspx Cross-Site Scripting source: https://www.securityfocus.com/bid/51401/info MailEnable is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script...

MailEnable HTTP Authorization Header Buffer Overflow (CVE-2005-1348)

MailEnable is a mail server application designed to run on the Microsoft Windows platform. MailEnable bundles a server component that supports the HTTPMail protocol. This protocol allows an email client, such as Outlook Express, to view, send, and manage electronic messages. The HTTPMail protocol...

MailEnable SMTP Service Denial of Service Vulnerabilities (ME-10044)

The SMTP service MESMTPC.exe included with the version of MailEnable on the remote host reportedly does not properly check the length of either the email address used in a 'MAIL FROM' command or the domain name in a 'RCPT TO' command before using it in a log message. A malicious attacker may be...

MailEnable SMTP NTLM Authentication Buffer Overflow

A buffer overflow vulnerability exists in MailEnable server products. The flaw is caused by insufficient validation checks when processing the signature field of NTLM Type1 messages within the SMTP service. A remote unauthenticated attacker may successfully exploit this vulnerability to execute...

CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

Command injection

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

CVE-2010-2580

MailEnable’s SMTP service MESMTPC.exe (MailEnable 3.x and 4.25) fails length checks for MAIL FROM and RCPT TO, permitting remote attackers to crash the service via overly long addresses/names, triggering an unhandled invalid parameter error. Root cause: insufficient length checks in logging/buffe...

CVE-2010-2580

The SMTP service MESMTPC.exe in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service crash via a long 1 email address in the MAIL FROM command, or 2 domain name in the RCPT TO command, which triggers an "unhandled invalid...

MailEnable 'MESMTRPC.exe' SMTP Service Multiple Remote Denial of Service Vulnerabilities

According to its banner, the remote MailEnable is prone to multiple remote denial-of-service vulnerabilities. An attacker can exploit these issue to crash the affected application, denying service to legitimate users. MailEnable 4.25 Standard Edition, Professional Edition, and Enterprise Edition...

MailEnable SMTP server DoS conditions

Uninitialized memory reference during logging on MAIL FROM / RCPT TO commands...

Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities

====================================================================== Secunia Research 13/09/2010 - MailEnable SMTP Service Two Denial of Service Vulnerabilities - ====================================================================== Table of Contents Affected...

MailEnable <= 4.25 Multiple DoS Vulnerabilities

MailEnable is prone to multiple remote denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable - Authorisation Header Buffer Overflow (Metasploit)

$Id: mailenableauthheader.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MailEnable - IMAPD W3C Logging Buffer Overflow (Metasploit)

$Id: mailenablew3cselect.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...