VulnerabilityModified
CVE-2005-1348
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
HIGH 7.5EPSS 72.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 72.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to execute arbitrary code via a long HTTP Authorization header.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 72.62% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- mailenable/mailenable enterprise · mailenable/mailenable professional
- Source
- cve@mitre.org
References
- http://marc.info/?l=bugtraq&m=111445834220015&w=2
- http://securitytracker.com/id?1013786
- http://www.osvdb.org/15737
- http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.plURL Repurposed
- http://marc.info/?l=bugtraq&m=111445834220015&w=2
- http://securitytracker.com/id?1013786
- http://www.osvdb.org/15737
- http://www.x0n3-h4ck.org/upload/x0n3-h4ck_mailenable_https.plURL Repurposed
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.