CVE-2006-6291
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via…
Does this matter?
Lower severity and a low EPSS score (3.11%). Track it; it rarely justifies an emergency change on its own.
Description
Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command, as addressed by the ME-10020 hotfix.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:L/Au:S/C:N/I:N/A:C
- EPSS
- 3.11% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- mailenable/mailenable
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/23080Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-71/advisory/Vendor Advisory
- http://securitytracker.com/id?1017276Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017319Third Party Advisory, VDB Entry
- http://www.mailenable.com/hotfix/Patch
- http://www.securityfocus.com/archive/1/453118/100/100/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/21362Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4778Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30614VDB Entry
- http://secunia.com/advisories/23080Patch, Vendor Advisory
- http://secunia.com/secunia_research/2006-71/advisory/Vendor Advisory
- http://securitytracker.com/id?1017276Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1017319Third Party Advisory, VDB Entry
- http://www.mailenable.com/hotfix/Patch
- http://www.securityfocus.com/archive/1/453118/100/100/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/21362Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2006/4778Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30614VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.