PT-2008-2867 · Mailenable · Mailenable Enterprise Edition+2

Matteo Memelli + 1 · Publicado 2008-03-10 · Atualizado 2017-09-29 · CVE-2008-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.x and earlier MailEnable Professional Edition versions 3.x and earlier MailEnable Enterprise Edition versions 3.x and earlier

Description The issue affects the SMTP service, allowing remote attackers to cause a denial of service via crafted commands, specifically EXPN or VRFY commands.

Recommendations For MailEnable Standard Edition versions 1.x and earlier, update to a version later than 1.x to resolve the issue. For MailEnable Professional Edition versions 3.x and earlier, update to a version later than 3.x to resolve the issue. For MailEnable Enterprise Edition versions 3.x and earlier, update to a version later than 3.x to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2008-1275

Produtos afetados

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

Referências · 7

• 🔥 https://exploit-db.com/exploits/5235 · Exploit
• http://vupen.com/english/advisories/2008/0800/references · Nota
• http://securityfocus.com/bid/28154 · Correção
• http://secunia.com/advisories/29300 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2008-1275 · Nota de Segurança
• http://mailenable.com/hotfix · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41083 · Nota