MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
BID:28145
Info
MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
| Bugtraq ID: | 28145 |
| Class: | Unknown |
| CVE: |
CVE-2008-1277 CVE-2008-1276 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 07 2008 12:00AM |
| Updated: | Jul 06 2016 02:17PM |
| Credit: | Luigi Auriemma is credited with discovering these vulnerabilities. |
| Vulnerable: |
MailEnable MailEnable Professional 1.116 MailEnable MailEnable Professional 1.115 MailEnable MailEnable Professional 1.114 MailEnable MailEnable Professional 1.113 MailEnable MailEnable Professional 1.112 MailEnable MailEnable Professional 1.111 MailEnable MailEnable Professional 1.110 MailEnable MailEnable Professional 1.109 MailEnable MailEnable Professional 1.108 MailEnable MailEnable Professional 1.107 MailEnable MailEnable Professional 1.106 MailEnable MailEnable Professional 1.105 MailEnable MailEnable Professional 1.104 MailEnable MailEnable Professional 1.103 MailEnable MailEnable Professional 1.102 MailEnable MailEnable Professional 1.101 MailEnable MailEnable Professional 1.54 MailEnable MailEnable Professional 1.53 MailEnable MailEnable Professional 1.52 MailEnable MailEnable Professional 1.51 MailEnable MailEnable Professional 1.19 MailEnable MailEnable Professional 1.18 MailEnable MailEnable Professional 1.17 MailEnable MailEnable Professional 1.16 MailEnable MailEnable Professional 1.15 MailEnable MailEnable Professional 1.14 MailEnable MailEnable Professional 1.13 MailEnable MailEnable Professional 1.12 MailEnable MailEnable Professional 1.7 MailEnable MailEnable Professional 1.6 MailEnable MailEnable Professional 1.5 MailEnable MailEnable Professional 1.2 a MailEnable MailEnable Professional 1.2 MailEnable MailEnable Professional 1.1 MailEnable MailEnable Professional 1.0 017 MailEnable MailEnable Professional 1.0 016 MailEnable MailEnable Professional 1.0 015 MailEnable MailEnable Professional 1.0 014 MailEnable MailEnable Professional 1.0 013 MailEnable MailEnable Professional 1.0 012 MailEnable MailEnable Professional 1.0 011 MailEnable MailEnable Professional 1.0 010 MailEnable MailEnable Professional 1.0 009 MailEnable MailEnable Professional 1.0 008 MailEnable MailEnable Professional 1.0 007 MailEnable MailEnable Professional 1.0 006 MailEnable MailEnable Professional 1.0 005 MailEnable MailEnable Professional 1.0 004 MailEnable MailEnable Professional 3.13 MailEnable MailEnable Professional 2.37 MailEnable MailEnable Professional 2.351 MailEnable MailEnable Professional 2.35 MailEnable MailEnable Professional 2.34 MailEnable MailEnable Professional 2.33 MailEnable MailEnable Professional 2.32 MailEnable MailEnable Professional 2.2 MailEnable MailEnable Professional 2.1 MailEnable MailEnable Professional 2.0 MailEnable MailEnable Professional 1.85 MailEnable MailEnable Professional 1.84 MailEnable MailEnable Professional 1.83 MailEnable MailEnable Professional 1.82 MailEnable MailEnable Professional 1.73 MailEnable MailEnable Professional 1.72 MailEnable MailEnable Enterprise Edition 1.1 MailEnable MailEnable Enterprise Edition 1.0 4 MailEnable MailEnable Enterprise Edition 1.0 3 MailEnable MailEnable Enterprise Edition 1.0 2 MailEnable MailEnable Enterprise Edition 1.0 1 MailEnable MailEnable Enterprise Edition 1.0 MailEnable MailEnable Enterprise Edition 3.13 MailEnable MailEnable Enterprise Edition 2.37 MailEnable MailEnable Enterprise Edition 2.35 MailEnable MailEnable Enterprise Edition 2.34 MailEnable MailEnable Enterprise Edition 2.33 MailEnable MailEnable Enterprise Edition 2.32 MailEnable MailEnable Enterprise Edition 2.2 MailEnable MailEnable Enterprise Edition 2.1 MailEnable MailEnable Enterprise Edition 2.0 MailEnable MailEnable Enterprise Edition 1.42 MailEnable MailEnable Enterprise Edition 1.41 MailEnable MailEnable Enterprise Edition 1.40 MailEnable MailEnable Enterprise Edition 1.21 MailEnable MailEnable Enterprise Edition 1.2 MailEnable MailEnable Enterprise Edition 1.1 MailEnable MailEnable Enterprise Edition 0 |
| Not Vulnerable: | |
Discussion
MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including:
- Multiple buffer-overflow vulnerabilities.
- Multiple denial-of-service vulnerabilities due to a NULL-pointer exception.
An attacker may leverage these issues to execute arbitrary code in the context of the running application or to crash the application, causing a denial of service.
These issues affect MailEnable 3.13; other versions may also be vulnerable.
MailEnable is prone to multiple remote vulnerabilities in the IMAP service, including:
- Multiple buffer-overflow vulnerabilities.
- Multiple denial-of-service vulnerabilities due to a NULL-pointer exception.
An attacker may leverage these issues to execute arbitrary code in the context of the running application or to crash the application, causing a denial of service.
These issues affect MailEnable 3.13; other versions may also be vulnerable.
Exploit / POC
MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
MailEnable 3.13 and Prior IMAP Service Multiple Remote Vulnerabilities
References:
References:
- MailEnable Homepage (MailEnable)
- Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 (Luigi Auriemma