MailEnable WebAdmin绕过认证漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable的WebAdmin登录进程实现上存在安全漏洞，攻击者可能利用此漏洞无需口令便可成功登录，获得非授权访问。 MailEnable MailEnable Professional Edition 2.32 MailEnable MailEnable Enterprise Edition 2.32 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mailenable.com/hotfix/ME-10019.ZIP...

MailEnable IMAP服务未明缓冲区溢出漏洞

MailEnable是一款流行的邮件服务程序. MailEnable IMAP服务存在未明缓冲区溢出，远程攻击者可以利用漏洞以应用程序进程权限执行任意指令。 目前没有详细漏洞细节提供。 MailEnable MailEnable Professional 2.0-2.32 MailEnable MailEnable Professional 1.9-1.82 MailEnable MailEnable Enterprise Edition 2.0-2.32 MailEnable MailEnable Enterprise Edition 1.1-1.30 补丁下载：...

MailEnable IMAP服务远程缓冲区溢出漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable在处理用户请求时存在漏洞，远程攻击者可以通过发送特制命令触发MailEnable的IMAP服务中的溢出漏洞，导致拒绝服务或执行任意代码。 MailEnable MailEnable Professional 2.0-2.32 MailEnable MailEnable Professional 1.9-1.82 MailEnable MailEnable Enterprise Edition 2.0-2.32 MailEnable MailEnable Enterprise Edition 1.1-1.3...

MailEnable SMTP NTLM认证多个安全漏洞

MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable的NTLM认证过程中SMTP连接器存在3个预认证漏洞。 1. 在处理NTLM Type1消息的签名字段时存在缓冲区溢出，可能导致执行任意代码； 2. 在处理base64编码的NTLM Type1消息中安全缓冲区时存在越界读取，可能导致拒绝服务； 3. 在Type3消息的base64编码过程中存在越界读取，可能导致执行任意代码。 MailEnable MailEnable Professional 2.0 MailEnable MailEnable Enterprise 2.0...

CVE-2006-5176

Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages"...

CVE-2006-5177

The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to 1 execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or 2 cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigge...

CVE-2006-5177

MailEnable Professional 2.0 and Enterprise 2.0 NTLM authentication is vulnerable. Remote attackers can craft base64 NTLM messages to trigger a buffer over-read, enabling arbitrary code execution or a denial of service via NTLM Type 1/Type 3 messages. The vulnerability affects the SMTP/NTLM handli...

CVE-2006-5177

The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to 1 execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or 2 cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigge...

CVE-2006-5176

Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages"...

CVE-2006-5176

MailEnable Professional 2.0 and Enterprise 2.0 are affected by a buffer overflow in NTLM authentication, allowing remote, unauthenticated attackers to execute arbitrary code via the signature field of NTLM Type 1 messages. The issue enables remote code execution or service crash in the MailEnable...

CVE-2006-5176: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages"...

CVE-2006-5177: Improper Restriction of Operations within the Bounds of a Memory Buffer

The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to 1 execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or 2 cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigge...

MailEnable SMTP Connector Multiple NTLM Authentication Vulnerabilities

The remote host is running MailEnable, a commercial mail server for Windows. The version of MailEnable Professional or MailEnable Enterprise installed on the remote host has several problems involving its support of NTLM authentication. A remote, unauthenticated attacker can leverage these flaws ...

Multiple MailEnable Mail server vulnerabilities

Multiple buffer overflows and DoS conditions on SMTP NTLM authentication...

[Full-disclosure] [MU-200609-01] Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP MU-200609-01 September 29, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: MailEnable Professional 2.0 MailEnable Enterprise 2.0 Product Overview: "MailEnable's...

MailEnable SMTP Connector Service SPF Record Crafted Lookup DoS

The remote host is running MailEnable, a commercial mail server for Windows. The SMTP server bundled with the version of MailEnable installed on the remote host is affected by a flaw in which SPF lookups for domains with large records may result in a NULL pointer exception in the SMTP service. An...

CVE-2006-4616

SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...

CVE-2006-4616: Undefined Security Weakness

SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...

CVE-2006-4616

The CVE-2006-4616 issue affects the MailEnable SMTP service (Standard/Professional/Enterprise), where SPF lookups for domains with large records can trigger a NULL pointer exception in the SMTP service, allowing unauthenticated remote attackers to cause a denial of service. Affected products are ...

CVE-2006-4616

SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...