CVE-2006-6423
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 70.7%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 70.71% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- mailenable/mailenable enterprise · mailenable/mailenable professional
- Source
- PSIRT-CNA@flexerasoftware.com
References
- http://secunia.com/advisories/23201
- http://secunia.com/secunia_research/2006-73/advisory/Patch, Vendor Advisory
- http://securityreason.com/securityalert/2022
- http://www.mailenable.com/hotfix/Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/454075/100/0/threaded
- http://www.securityfocus.com/bid/21492
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30796
- http://secunia.com/advisories/23201
- http://secunia.com/secunia_research/2006-73/advisory/Patch, Vendor Advisory
- http://securityreason.com/securityalert/2022
- http://www.mailenable.com/hotfix/Patch, Vendor Advisory
- http://www.securityfocus.com/archive/1/454075/100/0/threaded
- http://www.securityfocus.com/bid/21492
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30796
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.