PT-2005-5140 · Mailenable · Mailenable Professional+1

Tim Shelton · Published 2005-12-21 · Updated 2008-09-05 · CVE-2005-4457

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Enterprise versions 1.1 and prior MailEnable Professional versions 1.71 and prior

Description The issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command. It is also caused by errors in handling arguments passed to certain IMAP commands, such as UID FETCH, LIST, and LSUB. This can be exploited by an authenticated user to cause a DoS via malformed arguments or to cause a stack-based buffer overflow via an overly long argument.

Recommendations For MailEnable Enterprise version 1.1, apply patch ME-10009 to resolve the issue. For MailEnable Enterprise versions prior to 1.1, update to version 1.1 and apply patch ME-10009. For MailEnable Professional version 1.71 and prior, update to a version later than 1.71. As a temporary workaround, consider restricting access to the UID FETCH, LIST, and LSUB IMAP commands until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-4457

Affected Products

Mailenable Enterprise

Mailenable Professional

References · 8

• 🔥 http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-4457 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2005-4457 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-4456 · Security Note
• http://secunia.com/advisories/18134 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040388.html · Note
• http://securitylab.ru/vulnerability/243324.php · Note
• http://securityfocus.com/bid/15985 · Note