MailEnable HTTPMail Service Authorization Header Handling Remote DoS

The remote host is running an instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request with a malformed Authorization header, which causes a NULL pointer dereference error and crash...

MailEnable HTTPMail Service Content-Length Header Overflow

The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an Content-Length header exceeding 100 bytes, which causes a fixed-length buffer to...

MailEnable Professional HTTPMail GET Request Remote Overflow

The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which causes a heap-based buffer...

mailenable.txt

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :Application: MailEnable Professional HTTPMail :Vendors: http://www.mailenable.com/ :Version: 1.19 :Platforms: Windows :Bug: D.O.S :Date: 2004-07-30 :Author: CoolICE :Email: CoolICEChina.com...

MailEnable HTTPMail buffer overflow

Buffer overflow on oversized Content-Length...

[Full-Disclosure] DOS@MEHTTPS

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :Application: MailEnable Professional HTTPMail :Vendors: http://www.mailenable.com/ :Version: 1.19 :Platforms: Windows :Bug: D.O.S :Date: 2004-07-30 :Author: CoolICE :Email: CoolICEChina.com...

MailEnable 1.1x - Content-Length Denial of Service

source: https://www.securityfocus.com/bid/10838/info MailEnable is reported prone to a remote denial of service vulnerability. This vulnerability is reported to exist in the MailEnable HTTP header parsing code. When reading a large content-length header field from an HTTP request, the operation...

MailEnable 1.1x - Content-Length Denial of Service

MailEnable 1.1x - Content-Length Denial of Service source: https://www.securityfocus.com/bid/10838/info MailEnable is reported prone to a remote denial of service vulnerability. This vulnerability is reported to exist in the MailEnable HTTP header parsing code. When reading a large content-length...

MailEnable Buffer overflow

Heap overflow in MEHTTPS on oversized GET reqauest and in SMTP component...

[NT] Remote Heap Corruption overflow Vulnerability in MailEnable

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

MailEnable Mail Server HTTPMail 1.x - Remote Heap Overflow

source: https://www.securityfocus.com/bid/10312/info MailEnable is a commercially available POP3 and SMTP server for the Windows platform. The 'Professional' and 'Enterprise' editions of MailEnable are reported to be prone to a remote heap buffer overflow. The overflow allows the attacker to...

MailEnable Mail Server HTTPMail 1.x - Remote Heap Overflow

MailEnable Mail Server HTTPMail 1.x - Remote Heap Overflow source: https://www.securityfocus.com/bid/10312/info MailEnable is a commercially available POP3 and SMTP server for the Windows platform. The 'Professional' and 'Enterprise' editions of MailEnable are reported to be prone to a remote hea...

CVE-2002-2357

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service crash via a long USER string, possibly due to a buffer overflow...

MailEnable POP3 Server remote shutdown !:/ -newest ~ (and previous) bufferoverflow-

My first post, please bare with me. -/-About.-/- I found this problem auditing a webserver, it’s a standard bufferoverflow i guess, but i am not sure how to find all the technical information but if anyone knows what to do i would like to know, if some one have the time to send a brief mail or...

MailEnable buffer overflow

Buffer overflow on oversized USER command...

MailEnable 1.501x - Email Server Buffer Overflow

MailEnable 1.501x - Email Server Buffer Overflow // source: https://www.securityfocus.com/bid/6197/info A buffer overflow vulnerability has been reported for MailEnable's POP3 server. The vulnerability is due to insufficent bounds checking of the USER login field. An attacker can exploit this...

MailEnable 1.501x - Email Server Buffer Overflow

// source: https://www.securityfocus.com/bid/6197/info A buffer overflow vulnerability has been reported for MailEnable's POP3 server. The vulnerability is due to insufficent bounds checking of the USER login field. An attacker can exploit this vulnerability by connecting to a vulnerable MailEnab...

MailEnable Buffer Overflow Vulnerability

Advisory ID Internal CORE-2005-0629 Advisory ID: CORE-2005-0629 Bugtraq ID: 14243 CVE Name: CVE-2005-2278 Title: MailEnable Buffer Overflow Vulnerability Class: Boundary Error Condition Stack Buffer Overflow Remotely Exploitable: Yes Locally Exploitable: Yes Vendors contacted: - MailEnable...