PT-2005-4561 · Mailenable · Mailenable Professional+1

Josh Zlatin-Amishav · Published 2005-11-25 · Updated 2018-10-19 · CVE-2005-3813

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Professional versions 1.7 and earlier MailEnable Enterprise versions 1.1 and earlier

Description The issue is related to a denial of service vulnerability in the IMAP service of MailEnable. It occurs when the IMAP server handles the "Rename" command, specifically when attempting to rename non-existent folders. This can cause the service to crash. The estimated number of potentially affected devices is not provided.

Recommendations For MailEnable Professional version 1.7 and earlier, update to a version that fixes this issue. For MailEnable Enterprise version 1.1 and earlier, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the IMAP service or avoiding the use of the "Rename" command with non-existent mailboxes until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-3813

Affected Products

Mailenable Enterprise

Mailenable Professional

References · 13

• 🔥 http://securityfocus.com/bid/15556 · Exploit
• 🔥 https://exploit-db.com/exploits/26575 · Exploit
• http://zur.homelinux.com/Advisories/MailEnableImapDos.txt · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-3813 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-3813 · Security Note
• http://secunia.com/advisories/17740 · Vendor Advisory
• http://securitylab.ru/vulnerability/242402.php · Note
• http://securityreason.com/securityalert/205 · Note
• http://marc.info/?l=full-disclosure&m=113285451031500&w=2 · Note
• http://osvdb.org/21109 · Note
• http://securityfocus.com/archive/1/417589/30/0/threaded · Note
• http://securitytracker.com/id?1015268 · Note
• http://vupen.com/english/advisories/2005/2579 · Note