PT-2004-3089 · Mailenable · Mailenable Enterprise Edition+1

Published 2004-12-31 · Updated 2008-09-05 · CVE-2004-2194

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Professional Edition versions prior to 1.53 MailEnable Enterprise Edition versions prior to 1.02

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending malformed commands. This can be achieved via either SMTP or IMAP commands.

Recommendations For MailEnable Professional Edition versions prior to 1.53, update to version 1.53 or later. For MailEnable Enterprise Edition versions prior to 1.02, update to version 1.02 or later.

Fix

Related Identifiers

CVE-2004-2194

Affected Products

Mailenable Enterprise Edition

Mailenable Professional Edition

References · 4

• http://mailenable.com/enterprisehistory.asp · Patch
• http://mailenable.com/professionalhistory.asp · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-2194 · Security Note
• http://securityfocus.com/bid/11418 · Note