7.8
CVSSv2

CVE-2007-0955

Published: 15/02/2007 Updated: 02/10/2019
CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10
VMScore: 790
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Vulnerability Summary

The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and previous versions allows remote malicious users to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.

Vulnerable Product Search on Vulmon Subscribe to Product

mailenable mailenable

Exploits

#!/usr/bin/perl # # maildisable-v7pl # # Mail Enable Professional/Enterprise v232-7 (win32) # by mu-b - Wed Feb 14 2007 # # - Tested on: Mail Enable Professional v237 (win32) # ######## use Getopt::Std; getopts('t:', \%arg); use Socket; use MIME::Base64; &print_header; my $target; if (defined($arg{'t'})) { $target = $arg{'t'} } if (!(def ...
#!/usr/bin/perl # # maildisable-v5pl # # Mail Enable Professional/Enterprise <=v235 (win32) # by mu-b - Wed Nov 29 2006 # # - Tested on: Mail Enable Professional v232 (win32) - with HOTFIX # Mail Enable Professional v233 (win32) # Mail Enable Professional v234 (win32) # Mail Enable Professional v235 ( ...