PT-2006-6920 · Mailenable · Mailenable Professional+1

Publicado 2006-12-05 · Atualizado 2019-10-03 · CVE-2006-6291

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MailEnable Professional versions 1.6 through 1.83 MailEnable Professional versions 2.0 through 2.33 MailEnable Enterprise versions 1.1 through 1.40 MailEnable Enterprise versions 2.0 through 2.33

Description The issue is related to a stack overflow in the IMAP module, which can be triggered by remote authenticated users. This is achieved by sending a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command. The result is a denial of service, causing the system to crash.

Recommendations For MailEnable Professional versions 1.6 through 1.83, apply the ME-10020 hotfix. For MailEnable Professional versions 2.0 through 2.33, apply the ME-10020 hotfix. For MailEnable Enterprise versions 1.1 through 1.40, apply the ME-10020 hotfix. For MailEnable Enterprise versions 2.0 through 2.33, apply the ME-10020 hotfix.

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2006-6291

Produtos afetados

Mailenable Enterprise

Mailenable Professional

Referências · 11

• http://securityfocus.com/bid/21362 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6291 · Nota
• http://mailenable.com/hotfix · Correção
• http://secunia.com/secunia_research/2006-71/advisory · Aviso do Fabricante
• http://secunia.com/advisories/23080 · Aviso do Fabricante
• http://securitytracker.com/id?1017319 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-6291 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30614 · Nota
• http://vupen.com/english/advisories/2006/4778 · Aviso do Fabricante
• http://securityfocus.com/archive/1/453118/100/100/threaded · Nota
• http://securitytracker.com/id?1017276 · Nota