PT-2005-4446 · Mailenable · Mailenable Professional+1
Publicado
2005-11-19
·
Atualizado
2017-07-11
·
CVE-2005-3690
CVSS v2.0
7.5
Alta
| Vetor | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
MailEnable Professional versions 1.6 and earlier
MailEnable Enterprise versions 1.1 and earlier
Description
The issue is related to a stack-based buffer overflow in the IMAP service of MailEnable, which can be exploited by remote attackers to execute arbitrary code. This can be achieved by providing a long mailbox name in various IMAP commands, including select, create, delete, rename, subscribe, or unsubscribe.
Recommendations
For MailEnable Professional versions 1.6 and earlier, update to a version later than 1.6 to resolve the issue.
For MailEnable Enterprise versions 1.1 and earlier, update to a version later than 1.1 to resolve the issue.
As a temporary workaround, consider restricting access to the IMAP service or limiting the length of mailbox names to minimize the risk of exploitation.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mailenable Enterprise
Mailenable Professional