CVE-2008-1276

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:C/I:C/A:C
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 94%
VendorProductVersion
mailenablemailenable_enterprise
𝑥
≤ 3.13
mailenablemailenable_professional
𝑥
≤ 3.13
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://aluigi.altervista.org/adv/maildisable-adv.txt
http://secunia.com/advisories/29277
http://securityreason.com/securityalert/3724
http://www.securityfocus.com/archive/1/489270/100/0/threaded
http://www.securityfocus.com/bid/28145
http://www.securitytracker.com/id?1019565
http://www.vupen.com/english/advisories/2008/0799/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41058
https://www.exploit-db.com/exploits/5249
http://aluigi.altervista.org/adv/maildisable-adv.txt
http://secunia.com/advisories/29277
http://securityreason.com/securityalert/3724
http://www.securityfocus.com/archive/1/489270/100/0/threaded
http://www.securityfocus.com/bid/28145
http://www.securitytracker.com/id?1019565
http://www.vupen.com/english/advisories/2008/0799/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41058
https://www.exploit-db.com/exploits/5249