MailEnable W3C Logging Buffer Overflow Vulnerability

BID:15006

Info

MailEnable W3C Logging Buffer Overflow Vulnerability

Bugtraq ID: 15006
Class: Boundary Condition Error
CVE:
Remote: Yes
Local: No
Published: Oct 03 2005 12:00AM
Updated: Oct 03 2005 12:00AM
Credit: Reported by the vendor.
Vulnerable: MailEnable MailEnable Professional 1.116
MailEnable MailEnable Professional 1.115
MailEnable MailEnable Professional 1.114
MailEnable MailEnable Professional 1.113
MailEnable MailEnable Professional 1.112
MailEnable MailEnable Professional 1.111
MailEnable MailEnable Professional 1.110
MailEnable MailEnable Professional 1.109
MailEnable MailEnable Professional 1.108
MailEnable MailEnable Professional 1.107
MailEnable MailEnable Professional 1.106
MailEnable MailEnable Professional 1.105
MailEnable MailEnable Professional 1.104
MailEnable MailEnable Professional 1.103
MailEnable MailEnable Professional 1.102
MailEnable MailEnable Professional 1.101
MailEnable MailEnable Professional 1.54
MailEnable MailEnable Professional 1.53
MailEnable MailEnable Professional 1.52
MailEnable MailEnable Professional 1.51
MailEnable MailEnable Professional 1.19
MailEnable MailEnable Professional 1.19
MailEnable MailEnable Professional 1.18
MailEnable MailEnable Professional 1.18
MailEnable MailEnable Professional 1.17
MailEnable MailEnable Professional 1.17
MailEnable MailEnable Professional 1.16
MailEnable MailEnable Professional 1.16
MailEnable MailEnable Professional 1.15
MailEnable MailEnable Professional 1.14
MailEnable MailEnable Professional 1.13
MailEnable MailEnable Professional 1.12
MailEnable MailEnable Professional 1.6
MailEnable MailEnable Professional 1.5
MailEnable MailEnable Professional 1.2 a
MailEnable MailEnable Professional 1.2 a
MailEnable MailEnable Professional 1.2
MailEnable MailEnable Professional 1.2
MailEnable MailEnable Professional 1.1
MailEnable MailEnable Professional 1.0 017
MailEnable MailEnable Professional 1.0 016
MailEnable MailEnable Professional 1.0 015
MailEnable MailEnable Professional 1.0 014
MailEnable MailEnable Professional 1.0 013
MailEnable MailEnable Professional 1.0 012
MailEnable MailEnable Professional 1.0 011
MailEnable MailEnable Professional 1.0 010
MailEnable MailEnable Professional 1.0 009
MailEnable MailEnable Professional 1.0 008
MailEnable MailEnable Professional 1.0 007
MailEnable MailEnable Professional 1.0 006
MailEnable MailEnable Professional 1.0 005
MailEnable MailEnable Professional 1.0 004
MailEnable MailEnable Enterprise Edition 1.1
MailEnable MailEnable Enterprise Edition 1.0 4
MailEnable MailEnable Enterprise Edition 1.0 3
MailEnable MailEnable Enterprise Edition 1.0 2
MailEnable MailEnable Enterprise Edition 1.0 1
MailEnable MailEnable Enterprise Edition 1.0
Not Vulnerable:

Discussion

MailEnable W3C Logging Buffer Overflow Vulnerability

MailEnable is prone to a buffer overflow vulnerability.

This issue arises when the application processes W3C logging and may allow an attacker to execute arbitrary code on a vulnerable computer with SYSTEM privileges.

MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1.1 and prior are affected.

Exploit / POC

MailEnable W3C Logging Buffer Overflow Vulnerability

An exploit is available from [email protected].

An exploit (mailenable_imap_w3c.pm) for the Metasploit Framework has been released.

Solution / Fix

MailEnable W3C Logging Buffer Overflow Vulnerability

Solution:
The vendor has released a hotfix to address this issue.


MailEnable MailEnable Professional 1.0 010

MailEnable MailEnable Professional 1.0 016

MailEnable MailEnable Professional 1.0 007

MailEnable MailEnable Professional 1.0 008

MailEnable MailEnable Professional 1.0 011

MailEnable MailEnable Enterprise Edition 1.0 2

MailEnable MailEnable Professional 1.0 006

MailEnable MailEnable Professional 1.0 012

MailEnable MailEnable Professional 1.0 017

MailEnable MailEnable Professional 1.0 009

MailEnable MailEnable Enterprise Edition 1.0

MailEnable MailEnable Professional 1.0 005

MailEnable MailEnable Enterprise Edition 1.0 1

MailEnable MailEnable Professional 1.0 015

MailEnable MailEnable Enterprise Edition 1.0 3

MailEnable MailEnable Enterprise Edition 1.0 4

MailEnable MailEnable Professional 1.0 004

MailEnable MailEnable Professional 1.0 014

MailEnable MailEnable Professional 1.0 013

MailEnable MailEnable Enterprise Edition 1.1

MailEnable MailEnable Professional 1.1

MailEnable MailEnable Professional 1.101

MailEnable MailEnable Professional 1.102

MailEnable MailEnable Professional 1.103

MailEnable MailEnable Professional 1.104

MailEnable MailEnable Professional 1.105

MailEnable MailEnable Professional 1.106

MailEnable MailEnable Professional 1.107

MailEnable MailEnable Professional 1.108

MailEnable MailEnable Professional 1.109

MailEnable MailEnable Professional 1.110

MailEnable MailEnable Professional 1.111

MailEnable MailEnable Professional 1.112

MailEnable MailEnable Professional 1.113

MailEnable MailEnable Professional 1.114

MailEnable MailEnable Professional 1.115

MailEnable MailEnable Professional 1.116

MailEnable MailEnable Professional 1.12

MailEnable MailEnable Professional 1.13

MailEnable MailEnable Professional 1.14

MailEnable MailEnable Professional 1.15

MailEnable MailEnable Professional 1.16

MailEnable MailEnable Professional 1.16

MailEnable MailEnable Professional 1.17

MailEnable MailEnable Professional 1.17

MailEnable MailEnable Professional 1.18

MailEnable MailEnable Professional 1.18

MailEnable MailEnable Professional 1.19

MailEnable MailEnable Professional 1.19

MailEnable MailEnable Professional 1.2

MailEnable MailEnable Professional 1.2 a

MailEnable MailEnable Professional 1.2 a

MailEnable MailEnable Professional 1.2

MailEnable MailEnable Professional 1.5

MailEnable MailEnable Professional 1.51

MailEnable MailEnable Professional 1.52

MailEnable MailEnable Professional 1.53

MailEnable MailEnable Professional 1.54

MailEnable MailEnable Professional 1.6

References

MailEnable W3C Logging Buffer Overflow Vulnerability

References:

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report