PT-2006-2346 · Mailenable · Mailenable Enterprise Edition+2

Published 2006-03-20 · Updated 2017-07-20 · CVE-2006-1337

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.92 and prior MailEnable Professional Edition version 1.72 and prior MailEnable Enterprise Edition version 1.2 and prior

Description A buffer overflow issue exists in the POP3 service, allowing remote attackers to execute arbitrary code via unknown vectors before authentication. This is due to a boundary error in handling certain POP3 pre-authentication commands. Additionally, an error in the webmail component can lead to high CPU resource consumption when viewing malformed quoted-printable emails.

Recommendations For MailEnable Standard Edition versions 1.92 and prior, update to version 1.93 or later. For MailEnable Professional Edition version 1.72 and prior, update to version 1.73 or later. For MailEnable Enterprise Edition version 1.2 and prior, update to version 1.21 or later.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2006-1337

Affected Products

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

References · 12

• http://secunia.com/advisories/19288 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1337 · Security Note
• http://vupen.com/english/advisories/2006/1006 · Vendor Advisory
• http://mailenable.com/standardhistory.asp · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1337 · Note
• http://securitytracker.com/id?1015797 · Note
• http://mailenable.com/professionalhistory.asp · Note
• http://securityfocus.com/bid/17162 · Note
• http://mailenable.com/enterprisehistory.asp · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25314 · Note
• http://osvdb.org/24012 · Note