PT-2006-2346 · Mailenable · Mailenable Enterprise Edition+2

Publicado 2006-03-20 · Atualizado 2017-07-20 · CVE-2006-1337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.92 and prior MailEnable Professional Edition version 1.72 and prior MailEnable Enterprise Edition version 1.2 and prior

Description A buffer overflow issue exists in the POP3 service, allowing remote attackers to execute arbitrary code via unknown vectors before authentication. This is due to a boundary error in handling certain POP3 pre-authentication commands. Additionally, an error in the webmail component can lead to high CPU resource consumption when viewing malformed quoted-printable emails.

Recommendations For MailEnable Standard Edition versions 1.92 and prior, update to version 1.93 or later. For MailEnable Professional Edition version 1.72 and prior, update to version 1.73 or later. For MailEnable Enterprise Edition version 1.2 and prior, update to version 1.21 or later.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-1337

Produtos afetados

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

Referências · 12

• http://mailenable.com/standardhistory.asp · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1337 · Nota
• http://securitytracker.com/id?1015797 · Nota
• http://secunia.com/advisories/19288 · Aviso do Fabricante
• http://mailenable.com/professionalhistory.asp · Nota
• http://securityfocus.com/bid/17162 · Nota
• http://mailenable.com/enterprisehistory.asp · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-1337 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25314 · Nota
• http://vupen.com/english/advisories/2006/1006 · Aviso do Fabricante
• http://osvdb.org/24012 · Nota