ID CVE-2006-6484
Summary The IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.34, Professional Edition 1.6 through 1.83, and Enterprise Edition 1.1 through 1.40 allows remote attackers to cause a denial of service (crash) via unspecified vectors that trigger a null pointer dereference, as addressed by the ME-10023 hotfix, and a different issue than CVE-2006-6423. NOTE: some details were obtained from third party information.
References
Vulnerable Configurations
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.2:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.11:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.11:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.12:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.12:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.13:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.13:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.14:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.14:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.15:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.15:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.16:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.16:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.17:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.17:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.18:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.18:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.19:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.19:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.21:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.21:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.22:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.22:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.23:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.23:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.24:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.24:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.25:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.25:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.26:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.26:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.27:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.27:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.28:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.28:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.29:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.29:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.30:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.30:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.31:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.31:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.32:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.32:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.33:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.33:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.34:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.34:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.35:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.35:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.36:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.36:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.37:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.37:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.38:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.38:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.39:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.39:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:1.40:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:1.40:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.32:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.32:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.33:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.33:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_enterprise:2.34:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_enterprise:2.34:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.82:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.82:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:1.83:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:1.83:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.1:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.1:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.2:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.2:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.32:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.32:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.33:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.33:*:*:*:*:*:*:*
  • cpe:2.3:a:mailenable:mailenable_professional:2.34:*:*:*:*:*:*:*
    cpe:2.3:a:mailenable:mailenable_professional:2.34:*:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 29-07-2017 - 01:29)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
bid 21493
confirm http://www.mailenable.com/hotfix/
secunia 23267
xf mailenable-null-imap-dos(30797)
Last major update 29-07-2017 - 01:29
Published 12-12-2006 - 20:28
Last modified 29-07-2017 - 01:29
Back to Top