CVE-2006-6964

MailEnable Professional prior to v1.78 contains an information disclosure vulnerability: when an administrator edits a user’s settings, a cleartext user password is exposed in the HTML source. This allows remote authenticated administrators to obtain sensitive information. The affected product/co...

CVE-2006-6964

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source...

CVE-2006-6964: Undefined Security Weakness

MailEnable Professional before 1.78 provides a cleartext user password when an administrator edits the user's settings, which allows remote authenticated administrators to obtain sensitive information by viewing the HTML source...

Preemptive Protection against MailEnable POP3 Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in MailEnable service. MailEnable is an email server suite for Microsoft Windows. Several mail servers contain buffer overflow errors in the way they handle commands. By carefully crafting an overly long POP3 'PASS' command, an attacker can trigger a buffer...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

MailEnable POP PASS command buffer overflow

Added: 12/28/2006 CVE: CVE-2006-6605 BID: 21645 OSVDB: 32341 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. Problem A buffer overflow vulnerability in MailEnable allows remote, unauthenticated attackers to execute arbitrary commands by sending a long,...

CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

CVE-2006-6605

This CVE (CVE-2006-6605) affects MailEnable POP3 service: a stack-based buffer overflow in handling the PASS command allows remote, unauthenticated attackers to execute arbitrary code. A boundary/overflow occurs when processing an overly long PASS argument, potentially enabling code execution wit...

CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

CVE-2006-6605: Undefined Security Weakness

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command...

Preemptive Protection against MailEnable IMAP Service Remote Code Execution Vulnerability

A buffer overflow vulnerability exists in MailEnable IMAP service. MailEnable is an email server suite for Microsoft Windows. Several IMAP servers contain buffer overflow errors in the way they handle IMAP commands. By carefully crafting an overly long LOGIN command, an attacker can trigger a...

MailEnable POP服务PASS命令远程栈溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable的POP服务在处理传送给PASS命令的参数时存在栈溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者发送了超长的畸形命令的话，就可以触发这个溢出，导致执行任意指令。 MailEnable MailEnable Professional Edition 2.35 MailEnable MailEnable Enterprise Edition 2.35 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

MailEnable POP Server PASS Command Remote Overflow (ME-10026)

The POP server bundled with the version of MailEnable installed on the remote host reportedly is affected by a buffer overflow involving the 'PASS' command. An unauthenticated, remote attacker may be able to exploit this issue to crash the service service or to execute arbitrary code with LOCAL...

MailEnable POP3 server buffer overflow

Buffer overflow in POP3 PASS command...

[Full-disclosure] Secunia Research: MailEnable POP Service "PASS" Command Buffer Overflow

====================================================================== Secunia Research 18/12/2006 - MailEnable POP Service "PASS" Command Buffer Overflow - ====================================================================== Table of Contents Affected...

CVE-2006-6484

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a null pointer dereference, as...

CVE-2006-6484

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a null pointer dereference, as...

CVE-2006-6484

CVE-2006-6484 affects MailEnable’s IMAP service in Professional/Enterprise Editions (versions 2.0–2.34; 1.1–1.40 ranges as listed) and causes a crash (DoS) via vectors that trigger a null pointer dereference. A hotfix ME-10023 addresses this issue; it is noted to be a separate issue from CVE-2006...