MailEnable SMTP EXPN/VRFY Commands Denial of Service Vulnerability

Bugtraq ID:	28154
Class:	Unknown
CVE:	CVE-2008-1275
Remote:	Yes
Local:	No
Published:	Mar 09 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	The vendor reported this vulnerability.
Vulnerable:	MailEnable MailEnable Professional 1.116 MailEnable MailEnable Professional 1.115 MailEnable MailEnable Professional 1.114 MailEnable MailEnable Professional 1.113 MailEnable MailEnable Professional 1.112 MailEnable MailEnable Professional 1.111 MailEnable MailEnable Professional 1.110 MailEnable MailEnable Professional 1.109 MailEnable MailEnable Professional 1.108 MailEnable MailEnable Professional 1.107 MailEnable MailEnable Professional 1.106 MailEnable MailEnable Professional 1.105 MailEnable MailEnable Professional 1.104 MailEnable MailEnable Professional 1.103 MailEnable MailEnable Professional 1.102 MailEnable MailEnable Professional 1.101 MailEnable MailEnable Professional 1.54 MailEnable MailEnable Professional 1.53 MailEnable MailEnable Professional 1.52 MailEnable MailEnable Professional 1.51 MailEnable MailEnable Professional 1.19 MailEnable MailEnable Professional 1.18 MailEnable MailEnable Professional 1.17 MailEnable MailEnable Professional 1.16 MailEnable MailEnable Professional 1.15 MailEnable MailEnable Professional 1.14 MailEnable MailEnable Professional 1.13 MailEnable MailEnable Professional 1.12 MailEnable MailEnable Professional 1.7 MailEnable MailEnable Professional 1.6 MailEnable MailEnable Professional 1.5 MailEnable MailEnable Professional 1.2 a MailEnable MailEnable Professional 1.2 MailEnable MailEnable Professional 1.1 MailEnable MailEnable Professional 1.0 017 MailEnable MailEnable Professional 1.0 016 MailEnable MailEnable Professional 1.0 015 MailEnable MailEnable Professional 1.0 014 MailEnable MailEnable Professional 1.0 013 MailEnable MailEnable Professional 1.0 012 MailEnable MailEnable Professional 1.0 011 MailEnable MailEnable Professional 1.0 010 MailEnable MailEnable Professional 1.0 009 MailEnable MailEnable Professional 1.0 008 MailEnable MailEnable Professional 1.0 007 MailEnable MailEnable Professional 1.0 006 MailEnable MailEnable Professional 1.0 005 MailEnable MailEnable Professional 1.0 004 MailEnable MailEnable Professional 3.13 MailEnable MailEnable Professional 2.37 MailEnable MailEnable Professional 2.351 MailEnable MailEnable Professional 2.35 MailEnable MailEnable Professional 2.34 MailEnable MailEnable Professional 2.33 MailEnable MailEnable Professional 2.32 MailEnable MailEnable Professional 2.2 MailEnable MailEnable Professional 2.1 MailEnable MailEnable Professional 2.0 MailEnable MailEnable Professional 1.85 MailEnable MailEnable Professional 1.84 MailEnable MailEnable Professional 1.83 MailEnable MailEnable Professional 1.82 MailEnable MailEnable Professional 1.73 MailEnable MailEnable Professional 1.72 MailEnable MailEnable Enterprise Edition 1.1 MailEnable MailEnable Enterprise Edition 1.0 4 MailEnable MailEnable Enterprise Edition 1.0 3 MailEnable MailEnable Enterprise Edition 1.0 2 MailEnable MailEnable Enterprise Edition 1.0 1 MailEnable MailEnable Enterprise Edition 1.0 MailEnable MailEnable Enterprise Edition 3.13 MailEnable MailEnable Enterprise Edition 2.37 MailEnable MailEnable Enterprise Edition 2.35 MailEnable MailEnable Enterprise Edition 2.34 MailEnable MailEnable Enterprise Edition 2.33 MailEnable MailEnable Enterprise Edition 2.32 MailEnable MailEnable Enterprise Edition 2.2 MailEnable MailEnable Enterprise Edition 2.1 MailEnable MailEnable Enterprise Edition 2.0 MailEnable MailEnable Enterprise Edition 1.42 MailEnable MailEnable Enterprise Edition 1.41 MailEnable MailEnable Enterprise Edition 1.40 MailEnable MailEnable Enterprise Edition 1.21 MailEnable MailEnable Enterprise Edition 1.2 MailEnable MailEnable Enterprise Edition 1.1 MailEnable MailEnable Enterprise Edition 0 MailEnable MailEnable 1.5018 MailEnable MailEnable 1.5017 MailEnable MailEnable 1.5016 MailEnable MailEnable 1.5015 MailEnable MailEnable 1.704 MailEnable MailEnable 1.703 MailEnable MailEnable 1.702 MailEnable MailEnable 1.701 MailEnable MailEnable 1.610 MailEnable MailEnable 1.72 MailEnable MailEnable 1.71 MailEnable MailEnable 1.9 MailEnable MailEnable 1.8 MailEnable MailEnable 1.96 MailEnable MailEnable 1.93 MailEnable MailEnable 1.92 MailEnable MailEnable 1.91
Not Vulnerable:

MailEnable SMTP EXPN/VRFY Commands Denial of Service Vulnerability

MailEnable is prone to a remote denial-of-service vulnerability.

This issue arises in the SMTP server and may result in a crash of the affected service.

This issue affects all versions of MailEnable Standard Edition, Professional Edition, and Enterprise Edition.

MailEnable SMTP EXPN/VRFY Commands Denial of Service Vulnerability

A proof of concept is available:

• /data/vulnerabilities/exploits/28154.py

MailEnable SMTP EXPN/VRFY Commands Denial of Service Vulnerability

References:

• MailEnable Homepage (MailEnable)
  
• MailEnable Hotfix Page (MailEnable)