critical9.0Public exploit code
CVE-2007-1301
Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execut…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MailEnable Professional/Enterprise 2.37 - 'APPEND' Remote Buffer Overflow2007-03-02 · remote · windows · Verified
Impact
Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mailenable | Mailenable Enterprise | All versions |
| Mailenable | Mailenable Professional | Version 2.37 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/24361
- http://www.mailenable.com/hotfix/
- http://www.securityfocus.com/bid/22792
- http://www.securitytracker.com/id?1017739
- http://www.vupen.com/english/advisories/2007/0811
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32801
- https://www.exploit-db.com/exploits/3397
- http://secunia.com/advisories/24361
- http://www.mailenable.com/hotfix/
- http://www.securityfocus.com/bid/22792
- http://www.securitytracker.com/id?1017739
- http://www.vupen.com/english/advisories/2007/0811
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32801
- https://www.exploit-db.com/exploits/3397