CVE-2004-2727 Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
MediumCVSS 4.3
EPSS 3.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in MEHTTPS (HTTPMail) of MailEnable Professional 1.5 through 1.7 allows remote attackers to cause a denial of service (application crash) via a long HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| MailEnable | = 1.5 | No fix listed |
| MailEnable | = 1.6 | No fix listed |
| MailEnable | = 1.7 | No fix listed |
References
- 11588 patch third-party-advisory vendor-advisory
- 1010107 vdb-entry
- www.hat-squad.com
- 6037 vdb-entry
- 6038 vdb-entry
- 10312 exploit patch vdb-entry
- ADV-2005-0383 vdb-entry
- mailenable-enabled-mehttps-dos(16114) vdb-entry
- mailenable-disabled-mehttps-bo(16115) vdb-entry