CVE Vulnerability

CVE-2008-1276

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

References
Link Resource
http://aluigi.altervista.org/adv/maildisable-adv.txt
http://www.securityfocus.com/bid/28145 Exploit
http://www.securitytracker.com/id?1019565
http://secunia.com/advisories/29277 Vendor Advisory
http://securityreason.com/securityalert/3724
http://www.vupen.com/english/advisories/2008/0799/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41058
https://www.exploit-db.com/exploits/5249
http://www.securityfocus.com/archive/1/489270/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*
cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*
Information

Published : 2008-03-10 11:44

Updated : 2018-10-11 08:31

NVD link : CVE-2008-1276

Mitre link : CVE-2008-1276

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer