MailEnable 1.1/1.7 - IMAP Rename Request Remote Denial of Service

source: https://www.securityfocus.com/bid/15556/info MailEnable is prone to a remote denial of service vulnerability. The vulnerability presents itself when a user issues a malicious rename request following authentication. Remote attackers can exploit this issue to trigger a denial of service...

MailEnable 1.11.7 - IMAP Rename Request Remote Denial of Service

MailEnable 1.11.7 - IMAP Rename Request Remote Denial of Service source: https://www.securityfocus.com/bid/15556/info MailEnable is prone to a remote denial of service vulnerability. The vulnerability presents itself when a user issues a malicious rename request following authentication. Remote...

mailenable154.pm.txt

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit

Exploit for unknown platform in category remote exploits =========================================================== MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit =========================================================== This file is part of the Metasploit Framework and may be...

MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit

No description provided by source. This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artisti...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as the core Framework dual GPLv2 and Artistic. The latest version of the...

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)

MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow Metasploit This file is part of the Metasploit Framework and may be redistributed according to the licenses defined in the Authors field below. In the case of an unknown or missing license, this file defaults to the same license as...

MailEnable < 1.7 IMAP Server Multiple Vulnerabilities (ME-100008)

The remote host is running MailEnable, a commercial mail server for Windows. The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to a stack-based buffer overflow when handling an overly-long mailbox name in certain...

CVE-2005-3690

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

CVE-2005-3690

Affected software: MailEnable Professional 1.6 and earlier; MailEnable Enterprise 1.1 and earlier (IMAP server meimaps.exe). Issue: Stack-based buffer overflow when processing overly long mailbox names in IMAP commands (SELECT, CREATE, DELETE, RENAME, SUBSCRIBE, UNSUBSCRIBE), allowing remote atta...

CVE-2005-3691

MailEnable IMAP server (meimaps.exe) prior to version 1.7/Enterprise prior to 1.1 is affected by a directory traversal vulnerability in the IMAP MAILBOX NAME handling during CREATE/RENAME commands. Root cause: insufficient boundary checks on the mailbox name parameter, allowing remote attackers t...

CVE-2005-3690

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

CVE-2005-3690: Undefined Security Weakness

Stack-based buffer overflow in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to execute arbitrary code via a long mailbox name in the 1 select, 2 create, 3 delete, 4 rename, 5 subscribe, or 6 unsubscribe commands...

CVE-2005-3691: Undefined Security Weakness

Directory traversal vulnerability in the IMAP service meimaps.exe of MailEnable Professional 1.6 and earlier and Enterprise 1.1 and earlier allows remote attackers to create or rename arbitrary mail directories via the mailbox name argument of the 1 create or 2 rename commands...

Multiple MailEnable mail server vulnerabilities

Buffer overflow and IMAP folders directory traversal, DoS...

[Full-disclosure] Secunia Research: MailEnable Buffer Overflow and Directory Traversal Vulnerabilities

====================================================================== Secunia Research 18/11/2005 - MailEnable Buffer Overflow and Directory Traversal Vulnerabilities - ====================================================================== Table of Contents Affected...

MailEnable HTTPMail Service Content-Length Overflow Vulnerability

The remote web server is affected by a buffer overflow vulnerability. Description : The target is running at least one instance of MailEnable that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP GET with an...

MailEnable HTTPMail Service GET Overflow Vulnerability

The target is running at least one instance of MailEnable - http://www.mailenable.com/ - that has a flaw in the HTTPMail service MEHTTPS.exe in the Professional and Enterprise Editions. The flaw can be exploited by issuing an HTTP request exceeding 4045 bytes 8500 if logging is disabled, which...