Published: 21/12/2005 Updated: 05/09/2008

CVSS v2 Base Score: 7.8 | Impact Score: 6.9 | Exploitability Score: 10

VMScore: 785

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C

Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands. NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mailenable mailenable enterprise 1.1
mailenable mailenable professional 1.71

#!/usr/bin/python ############################################################ # # Remote Mailenable Enterprise 11 EXAMINE buffer Overflow # Discovered and exploited by mati@see-securitycom # This vulnerability affects Mailenable Enterprise 11 # *without* the ME-10009EXE patch # # Details: # * SEH gets overwritten at 965 (968 in VMWare) bytes ...

NVD-CWE-Other http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html http://www.securityfocus.com/bid/15985 http://secunia.com/advisories/18134 https://nvd.nist.gov https://www.exploit-db.com/exploits/1378/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-4456

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect