MailEnable Enterprise 2.0 - 'ASP' Multiple Vulnerabilities

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version POSTOFFICE -----------------------End---------------------------- 2 Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disable him/her account!...

MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities

No description provided by source. Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMI...

MailEnable Enterprise <= 2.0 (ASP Version) Multiple Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== MailEnable Enterprise POSTOFFICE ---------------...

Authentication flaw

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

CVE-2006-1792

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

CVE-2006-1792

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

CVE-2006-1792

CVE-2006-1792 pertains to MailEnable’s POP service with affected versions: Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22. The vulnerability is described as unspecified with unknown attack vectors and impact related to “authentication exploits.”...

CVE-2006-1792: Undefined Security Weakness

Unspecified vulnerability in the POP service in MailEnable Standard Edition before 1.94, Professional Edition before 1.74, and Enterprise Edition before 1.22 has unknown attack vectors and impact related to "authentication exploits". NOTE: this is a different set of affected versions, and probabl...

MailEnable IMAP rename DoS Vulnerability

The remote IMAP server is prone to denial of service attacks. Description : The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to...

MailEnable <= 1.7 IMAP Rename DoS Vulnerability

MailEnable is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2006 Josh Zlatin-Amishav Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable POP3 Server APOP Command Remote Buffer Overflow

The remote host is running MailEnable, a commercial mail server for Windows. The POP3 server bundled with the version of MailEnable on the remote host has a buffer overflow flaw involving the APOP command that can be exploited remotely by an unauthenticated attacker to crash the affected service...

MailEnable POP3 Server Authentication Vulnerabilities

The remote host is running MailEnable, a commercial mail server for Windows. The POP3 server bundled with the version of MailEnable on the remote host has a buffer overflow flaw involving authentication commands that can be exploited remotely by an unauthenticated attacker to crash the affected...

MailEnable Webmail Malformed Encoded Quoted-printable Email DoS (CVE-2006-1338)

The remote host is running MailEnable, a commercial mail server for Windows. According to its banner, using the webmail service bundled with the version of MailEnable Enterprise Edition on the remote host to view specially-formatted quoted-printable messages reportedly can result in 100% CPU...

Code injection

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1338

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1337

Buffer overflow in the POP 3 POP3 service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication...

Buffer overflow

Buffer overflow in the POP 3 POP3 service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication...

CVE-2006-1338

CVE-2006-1338 affects MailEnable Webmail in Professional Edition before 1.73 and Enterprise Edition before 1.21. The vulnerability allows remote attackers to cause a denial of service through CPU consumption by handling specially crafted quoted-printable emails in the webmail interface (vectors a...

CVE-2006-1338

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

CVE-2006-1337

MailEnable POP3 servers are affected by a buffer overflow in the POP3 service on Standard (before 1.93), Professional (before 1.73), and Enterprise (before 1.21). The vulnerability allows remote, unauthenticated attackers to potentially execute arbitrary code via unknown vectors before authentica...