MailEnable mail server multiple vulnerabilities updated since 07.04.2005
Published:		13.07.2005
Source:		BUGTRAQ
SecurityVulns ID:		4642
Type:		remote
Level:		5/10
Description:		DoS on extended ASCII characted in EHLO command. Multiple IMAP buffer overflows. Authorization HTTPS buffer overflow.

Affected:		MAILENABLE : MailEnable Professional 1.54
		MAILENABLE : MailEnable Enterprise Edition 1.04

Original document		CORE SECURITY TECHNOLOGIES ADVISORIES, CORE-2005-0629: MailEnable Buffer Overflow Vulnerability (13.07.2005)
		SECUNIA, [SA15986] MailEnable IMAP "STATUS" Command Buffer Overflow (13.07.2005)
		CorryL, [Full-disclosure] MailEnable HTTPS Buffer Overflow [x0n3-h4ck] (25.04.2005)
		H D Moore, Re: [Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck] (07.04.2005)
		expanders, [Full-disclosure] MailEnable Imapd remote BoF + Exploit [x0n3-h4ck] (07.04.2005)
		CorryL, MailEnable Smtpd remote Dos [x0n3-h4ck] (06.04.2005)

Files:		MailEnable (Enterprise <= 1.04)(Professional <= 1.54) remote Imapd exploit
		MailEnable (Enterprise & Professional) HTTPS remote BoF exploit
		MailEnable (Enterprise <= 1.04)-(Professional <= 1.54 SMTPd remote DOS exploit
Discuss:		Read or add your comments to this news (0 comments)