PT-2006-2347 · Mailenable · Mailenable Enterprise Edition+2

Publicado 2006-03-20 · Atualizado 2017-07-20 · CVE-2006-1338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.92 and prior MailEnable Professional Edition versions 1.72 and prior MailEnable Enterprise Edition versions 1.2 and prior

Description The issue allows remote attackers to cause a denial of service or potentially execute arbitrary code. This can be achieved through unspecified vectors involving incorrectly encoded quoted-printable emails or a boundary error in the handling of certain POP3 pre-authentication commands. When a malformed quoted-printable email is viewed, it can consume a large amount of CPU resources.

Recommendations For MailEnable Standard Edition versions 1.92 and prior, update to version 1.93 or later. For MailEnable Professional Edition versions 1.72 and prior, update to version 1.73 or later. For MailEnable Enterprise Edition versions 1.2 and prior, update to version 1.21 or later.

Correção

DoS

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2006-1338

Produtos afetados

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

Referências · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1338 · Nota de Segurança
• http://mailenable.com/standardhistory.asp · Nota
• http://secunia.com/advisories/19288 · Aviso do Fabricante
• http://mailenable.com/professionalhistory.asp · Nota
• http://mailenable.com/enterprisehistory.asp · Nota
• http://securityfocus.com/bid/17161 · Nota
• http://vupen.com/english/advisories/2006/1006 · Aviso do Fabricante
• http://osvdb.org/24014 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25315 · Nota