Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allo…

Exploit prediction (EPSS)

7.09% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.

Exploits and detections

• EDB-5249 MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow · remote · 2008-03-14

CVSS scores

Classification

Weakness

• CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

References

• secunia.com /advisories/29277 · third-party-advisory, x_refsource_SECUNIA, x_transferred
• aluigi.altervista.org /adv/maildisable-adv.txt · x_refsource_MISC, x_transferred
• exploit-db.com /exploits/5249 · exploit, x_refsource_EXPLOIT-DB, x_transferred
• vupen.com /english/advisories/2008/0799/references · vdb-entry, x_refsource_VUPEN, x_transferred
• securityreason.com /securityalert/3724 · third-party-advisory, x_refsource_SREASON, x_transferred
• securityfocus.com /archive/1/489270/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
• securitytracker.com /id?1019565 · vdb-entry, x_refsource_SECTRACK, x_transferred
• securityfocus.com /bid/28145 · vdb-entry, x_refsource_BID, x_transferred
• exchange.xforce.ibmcloud.com /vulnerabilities/41058 · vdb-entry, x_refsource_XF, x_transferred

Sources

• CVE List: CVE-2008-1276
• NVD: CVE-2008-1276

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.