Detections
Analytics
MailEnable STATUS Command Overflow
high Nessus Network Monitor Plugin ID 3250
Synopsis
The remote IMAP server is prone to buffer overflows.Description
The remote host is running a version of MailEnable's IMAP service that is prone to a buffer overflow vulnerability triggered when processing a STATUS command with a long mailbox name. Once authenticated, an attacker can exploit this flaw to execute arbitrary code subject to the privileges of the affected application. In addition, the version of MailEnable is vulnerable to an IMAP directory traversal flaw. An attacker exploiting this flaw would need to be able to log into the server and issue a malformed ('../') request. Successful exploitation would result in the attacker accessing confidential data.Solution
Upgrade to MailEnable Professional 1.7 or higher or to MailEnable Enterprise Edition 1.2 or higher.See Also
Plugin Details
Severity: High
ID: 3250
Family: IMAP Servers
Published: 10/4/2005
Updated: 3/6/2019
Nessus ID: 19783
Risk Information
VPR
Risk Factor: High
Score: 7.0
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.2
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS v3
Risk Factor: High
Base Score: 7.3
Temporal Score: 6.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mailenable:mailenable
Exploitable With
Metasploit (MailEnable IMAPD W3C Logging Buffer Overflow)