MailEnable IMAP Service Mailbox Name Buffer Overflow (CVE-2005-3691; CVE-2006-6290)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

CVE-2005-3691

MailEnable IMAP server (meimaps.exe) prior to version 1.7/Enterprise prior to 1.1 is affected by a directory traversal vulnerability in the IMAP MAILBOX NAME handling during CREATE/RENAME commands. Root cause: insufficient boundary checks on the mailbox name parameter, allowing remote attackers t...