CVE-2008-1276

Summary

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/29277
• http://aluigi.altervista.org/adv/maildisable-adv.txt
• https://www.exploit-db.com/exploits/5249
• http://www.vupen.com/english/advisories/2008/0799/references
• http://securityreason.com/securityalert/3724
• http://www.securityfocus.com/archive/1/489270/100/0/threaded
• http://www.securitytracker.com/id?1019565
• http://www.securityfocus.com/bid/28145
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41058

References

• http://secunia.com/advisories/29277
• http://aluigi.altervista.org/adv/maildisable-adv.txt
• https://www.exploit-db.com/exploits/5249
• http://www.vupen.com/english/advisories/2008/0799/references
• http://securityreason.com/securityalert/3724
• http://www.securityfocus.com/archive/1/489270/100/0/threaded
• http://www.securitytracker.com/id?1019565
• http://www.securityfocus.com/bid/28145
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41058

• ←Previous
• Next→