NetSight
IP …
medium5.0Public exploit code

CVE-2006-3277

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

Affected products

VendorProductAffected versions
MailenableMailenable Enterprise
through 1.00
through 1.01
through 1.1
through 1.2
through 1.02
through 1.03
MailenableMailenable Professional
Versions 1.0.004, 1.0.005, 1.0.006, 1.0.007, 1.0.008, 1.0.009

Weakness classification

CWE-399

References