969 matches found
CVE-2006-5177
MailEnable Professional 2.0 and Enterprise 2.0 NTLM authentication is vulnerable. Remote attackers can craft base64 NTLM messages to trigger a buffer over-read, enabling arbitrary code execution or a denial of service via NTLM Type 1/Type 3 messages. The vulnerability affects the SMTP/NTLM handli...
CVE-2006-5176: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages"...
CVE-2006-5177: Improper Restriction of Operations within the Bounds of a Memory Buffer
The NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to 1 execute arbitrary code via unspecified vectors involving crafted base64 encoded NTLM Type 3 messages, or 2 cause a denial of service via crafted base64 encoded NTLM Type 1 messages, which trigge...
MailEnable SMTP Connector Multiple NTLM Authentication Vulnerabilities
The remote host is running MailEnable, a commercial mail server for Windows. The version of MailEnable Professional or MailEnable Enterprise installed on the remote host has several problems involving its support of NTLM authentication. A remote, unauthenticated attacker can leverage these flaws ...
[Full-disclosure] [MU-200609-01] Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Multiple Pre-Authentication Vulnerabilities in MailEnable SMTP MU-200609-01 September 29, 2006 http://labs.musecurity.com/advisories.html Affected Product/Versions: MailEnable Professional 2.0 MailEnable Enterprise 2.0 Product Overview: "MailEnable's...
Multiple MailEnable Mail server vulnerabilities
Multiple buffer overflows and DoS conditions on SMTP NTLM authentication...
MailEnable SMTP Connector Service SPF Record Crafted Lookup DoS
The remote host is running MailEnable, a commercial mail server for Windows. The SMTP server bundled with the version of MailEnable installed on the remote host is affected by a flaw in which SPF lookups for domains with large records may result in a NULL pointer exception in the SMTP service. An...
CVE-2006-4616
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
CVE-2006-4616
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
CVE-2006-4616
The CVE-2006-4616 issue affects the MailEnable SMTP service (Standard/Professional/Enterprise), where SPF lookups for domains with large records can trigger a NULL pointer exception in the SMTP service, allowing unauthenticated remote attackers to cause a denial of service. Affected products are ...
CVE-2006-4616: Undefined Security Weakness
SMTP service in MailEnable Standard, Professional, and Enterprise before ME-10014 20060904 allows remote attackers to cause a denial of service via an SPF lookup for a domain with a large number of records, which triggers a null pointer exception...
MailEnable SMTP AUTH LOGIN buffer overflow
Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...
MailEnable SMTP AUTH LOGIN buffer overflow
Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...
MailEnable SMTP AUTH LOGIN buffer overflow
Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...
MailEnable SMTP AUTH LOGIN buffer overflow
Added: 06/30/2006 CVE: CVE-2005-1781 BID: 13772 OSVDB: 16851 Background MailEnable is a mail server supporting SMTP and POP3 for Windows platforms. MailEnable Professional and MailEnable Enterprise also include IMAP and HTTPMail services. Problem The SMTP service in MailEnable is affected by a...
Mailenable-dos_pl.txt
!/usr/bin/perl -w Mailenable SMTP DoS exploit 24/06/2006 Filbert at divisionbyzero dot be use Net::Telnet; $string = "\0x99"; for $count = 1; $count 60, Errmode='return',Port='25'; $telnet-open$ARGV0;use Net::Telnet; $telnet-print"helo ", $string, "\n"; -- www.divisionbyzero.be...
CVE-2006-3277
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service application crash via a HELO command with a null byte in the argument, possibly triggering a lengt...
CVE-2006-3277
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service application crash via a HELO command with a null byte in the argument, possibly triggering a lengt...
CVE-2006-3277
Summary: CVE-2006-3277 affects MailEnable's SMTP service (Standard 1.92 and earlier; Professional 2.0 and earlier; Enterprise 2.0 and earlier) prior to the MESMTPC hotfix. A remote attacker can trigger a denial-of-service (application crash) by sending a HELO command containing a null byte, poten...