MailEnable IMAPD (1.54) STATUS Request Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MailEnable...

MailEnable IMAPD W3C Logging Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'MailEnable...

MailEnable POP3 Service PASS Command Buffer Overflow (CVE-2006-6605)

MailEnable is an email server suite for the Microsoft Windows platform. The product supports various email transfer protocols such as SMTP, POP3 and IMAP. The MailEnable protocol handlers are installed as individual services on the system, called Connectors. There exists a stack-based buffer...

MailEnable IMAP Service Invalid Command Buffer Overflow (CVE-2004-2501)

MailEnable is an email server suite for the Microsoft Windows platform. The product supports various popular mail transfer protocols such as SMTP, POP3 and IMAP. The components of the MailEnable product are installed as individual services on the system, called Connectors. A stack buffer overflow...

MailEnable IMAP Service Buffer Overflow (CVE-2004-2501)

The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. The MailEnable serv...

MailEnable IMAP STATUS Command Buffer Overflow (CVE-2005-2278)

The Internet Message Access Protocol IMAP specifies a protocol for the access and manipulation of electronic mail. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. T...

MailEnable SMTP Authentication Buffer Overflow (CVE-2005-1781)

MailEnable is an email server suite for the Microsoft Windows platform. The product supports a number of popular mail transfer protocols such as SMTP, POP3 and IMAP. The authentication extensions to the SMTP protocol are also supported by the product. There exists a vulnerability in the SMTP...

MailEnable 1.52 HTTP Mail Service Buffer Overflow

/ MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand Debugging Info szAppName : MEHTTPS.EXE szAppVer : 1.0.0.1 szModName : MEHTTPS.EXE szModVer : 1.0.0.1 offset : 00010c21 Files that caused error : C:\DOCUME1\Stefan\LOCALS1\Temp\WER567c.dir00\MEHTTPS.EXE.mdmp...

MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC

Exploit for unknown platform in category dos / poc ======================================================= MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC ======================================================= / MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand...

MailEnable 1.52 HTTP Mail Service Stack BOF Exploit PoC

No description provided by source. / MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand Debugging Info szAppName : MEHTTPS.EXE szAppVer : 1.0.0.1 szModName : MEHTTPS.EXE szModVer : 1.0.0.1 offset : 00010c21 Files that caused error :...

MailEnable 1.52 - HTTP Mail Service Stack Buffer Overflow (PoC)

MailEnable 1.52 - HTTP Mail Service Stack Buffer Overflow PoC / MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand Debugging Info szAppName : MEHTTPS.EXE szAppVer : 1.0.0.1 szModName : MEHTTPS.EXE szModVer : 1.0.0.1 offset : 00010c21 Files that caused error :...

MailEnable 1.52 - HTTP Mail Service Stack Buffer Overflow (PoC)

/ MailEnable 1.52 HTTP Mail Service Stack Overflow POC Exploitencoded comand Debugging Info szAppName : MEHTTPS.EXE szAppVer : 1.0.0.1 szModName : MEHTTPS.EXE szModVer : 1.0.0.1 offset : 00010c21 Files that caused error : C:\DOCUME1\Stefan\LOCALS1\Temp\WER567c.dir00\MEHTTPS.EXE.mdmp...

MailEnable IMAP Denial of Service Vulnerability

MailEnable Mail Server is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...

CVE-2008-3449

CVE-2008-3449 affects MailEnable Professional 3.5.2 and MailEnable Enterprise 3.52, where the MailEnable IMAP server can be triggered to crash under load by multiple simultaneous IMAP connections to the same folder, causing a denial of service. The OpenVAS/Nessus entries reference a remediation: ...

MailEnable IMAP Connection Saturation Remote DoS (ME-10042)

The IMAP server bundled with the version of MailEnable installed on the remote host reportedly may crash under load when there are multiple connections to the same folders. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid33810; scriptversion"1.13"; scriptcvsdate"Date:...

MailEnable IMAP连接远程拒绝服务漏洞

BUGTRAQ ID: 30498 MailEnable是一款商业性质的POP3和SMTP服务器。 MailEnable处理畸形请求时存在漏洞，如果远程攻击者对同一文件夹创建了大量的IMAP连接的话，就可能导致邮件服务器崩溃。 MailEnable 3.52 MailEnable ---------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mailenable.com/hotfix/ME-10042.EXE...

CVE-2008-3449: Undefined Security Weakness

MailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of service crash via multiple IMAP connection requests to the same folder...