CVE-2005-3690

Affected software: MailEnable Professional 1.6 and earlier; MailEnable Enterprise 1.1 and earlier (IMAP server meimaps.exe). Issue: Stack-based buffer overflow when processing overly long mailbox names in IMAP commands (SELECT, CREATE, DELETE, RENAME, SUBSCRIBE, UNSUBSCRIBE), allowing remote atta...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

CVE-2005-3691

MailEnable IMAP server (meimaps.exe) prior to version 1.7/Enterprise prior to 1.1 is affected by a directory traversal vulnerability in the IMAP MAILBOX NAME handling during CREATE/RENAME commands. Root cause: insufficient boundary checks on the mailbox name parameter, allowing remote attackers t...

CVE-2005-3690: Undefined Security Weakness

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691: Undefined Security Weakness

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

[Full-disclosure] Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - MailEnable Buffer Overflow and Directory Traversal Vulnerabilities - ====================================================================== Table of Contents Affected...

Multiple MailEnable mail server vulnerabilities

Buffer overflow and IMAP folders directory traversal, DoS...

MailEnable HTTPMail Service GET Overflow Vulnerability

The target is running at least one instance of MailEnable - http://www.mailenable.com/ - that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which...

MailEnable Multiple IMAP Buffer Overflow Vulnerabilities (Nov 2004) - Active Check

MailEnable is prone to multiple buffer overflow vulnerabilities in IMAP. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.19 DoS Vulnerability - Active Check

MailEnable is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable HTTPMail Service Content-Length Overflow Vulnerability

The remote web server is affected by a buffer overflow vulnerability. Description : The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an...

MailEnable IMAP Service Remote Buffer Overflows

The target is running at least one instance of MailEnable's IMAP service. Two flaws exist in MailEnable Professional Edition 1.52 and earlier as well as MailEnable Enterprise Edition 1.01 and earlier - a stack-based buffer overflow and an object pointer overwrite. A remote attacker can use either...

MailEnable < 1.19 HTTPMail Service GET Overflow Vulnerability - Active Check

MailEnable is prone to a heap buffer overflow vulnerability. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.5e IMAP Service Search DoS Vulnerability - Active Check

MailEnable is prone to a denial of service DoS vulnerability in IMAP when receiving a SEARCH command. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MailEnable IMAP Service Search DoS Vulnerability

The target is running at least one instance of MailEnable's IMAP service. A flaw exists in MailEnable Professional Edition versions 1.5a-d that results in this service crashing if it receives a SEARCH command. An authenticated user could send this command either on purpose as a denial of service...

MailEnable HTTPMail < 1.2 Content-Length Overflow Vulnerability - Active Check

MailEnable is prone to a Content-Length overflow vulnerability. SPDX-FileCopyrightText: 2004 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MailEnable < 1.8 SMTP Connector Service DNS Lookup DoS Vulnerability

MailEnable is prone to a denial of service DoS vulnerability in the SMTP connector service which will crash if it receives a DNS response with over 100 MX records. SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

CVE-2004-2501

CVE-2004-2501 describes a stack-based buffer overflow in MailEnable’s IMAP service (Professional 1.52 and Enterprise 1.01 and earlier). The vulnerability arises from improper boundary/IMAP data handling, allowing an unauthenticated remote attacker to cause a crash or execute arbitrary code by sen...

CVE-2004-2501

Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...

CVE-2004-2501: Undefined Security Weakness

Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...