CVE-2008-1277 The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND com...
HighCVSS 9.0
EPSS 8.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mailenable enterprise | <= 3.13 | No fix listed |
| mailenable professional | <= 3.13 | No fix listed |
References
- aluigi.altervista.org
- 29277 third-party-advisory vendor-advisory
- 3724 third-party-advisory
- 20080307 Multiple vulnerabilities in MailEnable Professional/Enterprise 3.13 mailing-list
- 28145 exploit vdb-entry
- 1019565 vdb-entry
- ADV-2008-0799 vdb-entry
- mailenable-imapservice-dos(41059) vdb-entry