MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

MailEnable < 1.7 IMAP Server Multiple Vulnerabilities (ME-100008)

The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to a stack-based buffer overflow when handling an overly-long mailbox name in certain...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

CVE-2005-3690

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3690

Affected software: MailEnable Professional 1.6 and earlier; MailEnable Enterprise 1.1 and earlier (IMAP server meimaps.exe). Issue: Stack-based buffer overflow when processing overly long mailbox names in IMAP commands (SELECT, CREATE, DELETE, RENAME, SUBSCRIBE, UNSUBSCRIBE), allowing remote atta...

CVE-2005-3690

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

CVE-2005-3691

MailEnable IMAP server (meimaps.exe) prior to version 1.7/Enterprise prior to 1.1 is affected by a directory traversal vulnerability in the IMAP MAILBOX NAME handling during CREATE/RENAME commands. Root cause: insufficient boundary checks on the mailbox name parameter, allowing remote attackers t...

[Full-disclosure] Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - MailEnable Buffer Overflow and Directory Traversal Vulnerabilities - ====================================================================== Table of Contents Affected...

Multiple MailEnable mail server vulnerabilities

Buffer overflow and IMAP folders directory traversal, DoS...

MailEnable HTTPMail Service GET Overflow Vulnerability

The target is running at least one instance of MailEnable - http://www.mailenable.com/ - that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which...

MailEnable HTTPMail Service Content-Length Overflow Vulnerability

The remote web server is affected by a buffer overflow vulnerability. Description : The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an...

MailEnable IMAP Service Remote Buffer Overflows

The target is running at least one instance of MailEnable's IMAP service. Two flaws exist in MailEnable Professional Edition 1.52 and earlier as well as MailEnable Enterprise Edition 1.01 and earlier - a stack-based buffer overflow and an object pointer overwrite. A remote attacker can use either...

MailEnable Multiple IMAP Buffer Overflow Vulnerabilities (Nov 2004) - Active Check

MailEnable is prone to multiple buffer overflow vulnerabilities in IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.19 DoS Vulnerability - Active Check

MailEnable is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.19 HTTPMail Service GET Overflow Vulnerability - Active Check

MailEnable is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.5e IMAP Service Search DoS Vulnerability - Active Check

MailEnable is prone to a denial of service DoS vulnerability in IMAP when receiving a SEARCH command. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MailEnable IMAP Service Search DoS Vulnerability

The target is running at least one instance of MailEnable's IMAP service. A flaw exists in MailEnable Professional Edition versions 1.5a-d that results in this service crashing if it receives a SEARCH command. An authenticated user could send this command either on purpose as a denial of service...

MailEnable < 1.8 SMTP Connector Service DNS Lookup DoS Vulnerability

MailEnable is prone to a denial of service DoS vulnerability in the SMTP connector service which will crash if it receives a DNS response with over 100 MX records. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright ...