PT-2008-2867 · Mailenable · Mailenable Enterprise Edition+2

Matteo Memelli + 1 · Published 2008-03-10 · Updated 2017-09-29 · CVE-2008-1275

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MailEnable Standard Edition versions 1.x and earlier MailEnable Professional Edition versions 3.x and earlier MailEnable Enterprise Edition versions 3.x and earlier

Description The issue affects the SMTP service, allowing remote attackers to cause a denial of service via crafted commands, specifically EXPN or VRFY commands.

Recommendations For MailEnable Standard Edition versions 1.x and earlier, update to a version later than 1.x to resolve the issue. For MailEnable Professional Edition versions 3.x and earlier, update to a version later than 3.x to resolve the issue. For MailEnable Enterprise Edition versions 3.x and earlier, update to a version later than 3.x to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2008-1275

Affected Products

Mailenable Enterprise Edition

Mailenable Professional Edition

Mailenable Standard Edition

References · 7

• 🔥 https://exploit-db.com/exploits/5235 · Exploit
• http://securityfocus.com/bid/28154 · Patch
• http://secunia.com/advisories/29300 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1275 · Security Note
• http://mailenable.com/hotfix · Patch
• http://vupen.com/english/advisories/2008/0800/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41083 · Note