ID CVE-2007-1301
Summary Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional Editions 2.37 and earlier allows remote authenticated users to execute arbitrary code via a long argument to the APPEND command. NOTE: this is probably different than CVE-2006-6423.
References
Vulnerable Configurations
  • cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.37:*:professional:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.37:*:professional:*:*:*:*:*
CVSS
Base: 9.0 (as of 11-10-2017 - 01:31)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:S/C:C/I:C/A:C
refmap via4
bid 22792
confirm http://www.mailenable.com/hotfix/
exploit-db 3397
sectrack 1017739
secunia 24361
vupen ADV-2007-0811
xf mailenable-append-bo(32801)
Last major update 11-10-2017 - 01:31
Published 07-03-2007 - 00:19
Last modified 11-10-2017 - 01:31
Back to Top