CVE-2008-1276 Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code vi...
HighCVSS 9.0
EPSS 7.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable enterprise | <= 3.13 | No fix listed |
| mailenable professional | <= 3.13 | No fix listed |
References
- aluigi.altervista.org
- 29277 third-party-advisory vendor-advisory
- 3724 third-party-advisory
- 20080307 Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 mailing-list
- 28145 exploit vdb-entry
- 1019565 vdb-entry
- ADV-2008-0799 vdb-entry
- mailenable-imapservice-bo(41058) vdb-entry
- 5249 exploit