CVE-2005-1013 The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode stri...
MediumCVSS 5.0
EPSS 5.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable enterprise | = 1.00 | No fix listed |
| mailenable enterprise | = 1.01 | No fix listed |
| mailenable enterprise | = 1.02 | No fix listed |
| mailenable enterprise | = 1.03 | No fix listed |
| mailenable enterprise | = 1.04 | No fix listed |
| mailenable professional | = 1.5 | No fix listed |
| mailenable professional | = 1.51 | No fix listed |
| mailenable professional | = 1.52 | No fix listed |
| mailenable professional | = 1.53 | No fix listed |
| mailenable professional | = 1.54 | No fix listed |
References
- 20050405 MailEnable Smtpd remote Dos [x0n3-h4ck] mailing-list
- 14812 third-party-advisory
- 1013637 patch vdb-entry
- www.mailenable.com patch
- 15232 vdb-entry
- www.securiteam.com exploit patch vendor-advisory
- 12994 exploit patch vdb-entry
- mailenable-smtp-dos(19948) vdb-entry
- mailenable-ehlo-dos(19973) vdb-entry