MailEnable IMAP Server (meimaps.exe) Crafted RENAME Command Remote DoS

medium Nessus Plugin ID 20245

Language:

Synopsis

The remote IMAP server is prone to denial of service attacks.

Description

The remote host is running MailEnable, a commercial mail server for Windows.

The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to incorrect handling of mailbox names in the rename command. An authenticated, remote attacker can exploit this flaw to crash the IMAP server on the remote host.

Solution

Apply the IMAP Cumulative Hotfix/Update provided in the zip file referenced above.

Plugin Details

Severity: Medium

ID: 20245

File Name: mailenable_imap_rename_dos.nasl

Version: 1.22

Type: remote

Agent: windows

Family: Windows

Published: 11/28/2005

Updated: 11/15/2018

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: Medium

Base Score: 4

Temporal Score: 3.1

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/a:mailenable:mailenable

Required KB Items: imap/login, imap/password

Excluded KB Items: imap/false_imap, imap/overflow

Exploit Available: true

Exploit Ease: Exploits are available

Vulnerability Publication Date: 11/24/2005

Reference Information

CVE: CVE-2005-3813

BID: 15556

Detections

Analytics