EUVD-2008-1285

Malware in sbrugna...

MailEnable Authorization Header Buffer Overflow

No description provided by source. $Id: mailenableauthheader.rb 9719 2010-07-07 17:38:59Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...

MailEnable Authorization Header Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MailEnable...

CVE-2008-1277: Improper Input Validation

The IMAP service MEIMAPS.exe in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service crash via 1 SEARCH and 2 APPEND commands without required arguments, which triggers a NULL pointer dereference...

CVE-2008-1276: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in the IMAP service MEIMAPS.EXE in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the 1 FETCH, 2 EXAMINE, and 3 UNSUBSCRIBE commands...

CVE-2006-6484: Undefined Security Weakness

The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service crash via unspecified vectors that trigger a null pointer dereference, as...

CVE-2006-6423: Undefined Security Weakness

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a...

MailEnable Enterprise Edition ASP Version <= 2.0

Hi, I'm Soroush Dalili from GrayHatz Security Group GSG. I found multiple bugs in MailEnable Enterprise Edition ASP Version = 2.0 that I listed them below: 1 - Any user can login to web administration site. 2 - Authenticated normal user can gain ADMIN or SYSADMIN level, also remote user can disab...

CVE-2006-1338: Undefined Security Weakness

Webmail in MailEnable Professional Edition before 1.73 and Enterprise Edition before 1.21 allows remote attackers to cause a denial of service CPU consumption via unspecified vectors involving "incorrectly encoded quoted-printable emails"...

Code injection

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...

CVE-2006-0504

CVE-2006-0504 affects MailEnable Enterprise Edition before 1.2. The vulnerability arises when a remote attacker views specially formatted quoted-printable emails through the webmail interface, causing denial of service via 100% to high CPU utilization. Documents do not specify exploitation detail...

CVE-2006-0504: Undefined Security Weakness

Unspecified vulnerability in MailEnable Enterprise Edition before 1.2 allows remote attackers to cause a denial of service CPU utilization by viewing "formatted quoted-printable emails" via webmail...

MailEnable Enterprise Edition 1.1 - EXAMINE Remote Buffer Overflow

MailEnable Enterprise Edition 1.1 - EXAMINE Remote Buffer Overflow !/usr/bin/python Remote Mailenable Enterprise 1.1 EXAMINE buffer Overflow Discovered and exploited by [email protected] This vulnerability affects Mailenable Enterprise 1.1 without the ME-10009.EXE patch. Details: SEH gets...

CVE-2004-2501: Undefined Security Weakness

Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via 1 a long command string or 2 a long string to the MEIMAP service and then terminating the connection...

CVE-2004-2194: Undefined Security Weakness

MailEnable Professional Edition before 1.53 and Enterprise Edition before 1.02 allows remote attackers to cause a denial of service crash via malformed 1 SMTP or 2 IMAP commands...