MailEnable IMAP Server EXAMINE Command Remote DoS

The remote host is running MailEnable, a commercial mail server for Windows. According to the version number in its banner, the IMAP server bundled with the installation of MailEnable Professional on the remote host may crash when handling certain EXAMINE commands. An authenticated attacker may b...

CVE-2006-0503

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...

Command injection

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...

CVE-2006-0504

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...

Code injection

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...

CVE-2006-0504

CVE-2006-0504 affects MailEnable Enterprise Edition before 1.2. The vulnerability arises when a remote attacker views specially formatted quoted-printable emails through the webmail interface, causing denial of service via 100% to high CPU utilization. Documents do not specify exploitation detail...

CVE-2006-0504

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...

CVE-2006-0503

IMAP service in MailEnable Professional Edition before 1.72 allows remote attackers to cause a denial of service service crash via unspecified vectors involving the EXAMINE command...

CVE-2006-0503

Summary of CVE-2006-0503 : The IMAP server in MailEnable Professional Edition prior to 1.72 is vulnerable to a remote denial of service via certain EXAMINE commands. Exploitation results in a service crash, affecting the MailEnable IMAP service. Remediation: upgrade to MailEnable Professional Edi...

[SA18668] MailEnable Professional EXAMINE Command Denial of Service

TITLE: MailEnable Professional EXAMINE Command Denial of Service SECUNIA ADVISORY ID: SA18668 VERIFY ADVISORY: http://secunia.com/advisories/18668/ CRITICAL: Less critical IMPACT: DoS WHERE: From remote SOFTWARE: MailEnable Professional 1.x http://secunia.com/product/3474/ DESCRIPTION: A...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

MailEnable IMAP command buffer overflow

Added: 01/24/2006 CVE: CVE-2004-2501 BID: 11755 OSVDB: 12135 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem A buffer overflow in the IMAP service allows an...

mailenable-imap-examine.py.txt

!/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets overwritten at 965 968 in VMWare bytes in the EXAMINE command. Filteri...

CVE-2005-4456

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...

CVE-2005-4457

MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via several "..." triple dot sequences in a UID FETCH command...

CVE-2005-4456

CVE-2005-4456 describes multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 prior to patch ME-10009, enabling remote attackers to crash the service and possibly execute arbitrary code via long LIST, LSUB, and UID FETCH commands. The description notes these may be alternat...

CVE-2005-4457

CVE-2005-4457 affects MailEnable Enterprise 1.1 prior to patch ME-10009. The issue allows remote attackers to cause a denial of service (crash) and potentially execute arbitrary code via several triple-dot sequences in a UID FETCH command. Impact is limited to the described exposure in MailEnable...

CVE-2005-4456

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via long 1 LIST, 2 LSUB, and 3 UID FETCH commands. NOTE: it is possible that these are alternate vectors...