PT-2006-2347 · Mailenable · Mailenable Enterprise Edition+2

Published 2006-03-20 · Updated 2017-07-20 · CVE-2006-1338

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.92 and prior MailEnable Professional Edition versions 1.72 and prior MailEnable Enterprise Edition versions 1.2 and prior

Description The issue allows remote attackers to cause a denial of service or potentially execute arbitrary code. This can be achieved through unspecified vectors involving incorrectly encoded quoted-printable emails or a boundary error in the handling of certain POP3 pre-authentication commands. When a malformed quoted-printable email is viewed, it can consume a large amount of CPU resources.

Recommendations For MailEnable Standard Edition versions 1.92 and prior, update to version 1.93 or later. For MailEnable Professional Edition versions 1.72 and prior, update to version 1.73 or later. For MailEnable Enterprise Edition versions 1.2 and prior, update to version 1.21 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2006-1338

Affected Products

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2006-1338 · Security Note
• http://secunia.com/advisories/19288 · Vendor Advisory
• http://vupen.com/english/advisories/2006/1006 · Vendor Advisory
• http://mailenable.com/standardhistory.asp · Note
• http://mailenable.com/professionalhistory.asp · Note
• http://mailenable.com/enterprisehistory.asp · Note
• http://securityfocus.com/bid/17161 · Note
• http://osvdb.org/24014 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25315 · Note