CVE-2008-1275

high

Description

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.

References

https://www.exploit-db.com/exploits/5235

https://exchange.xforce.ibmcloud.com/vulnerabilities/41083

https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-1283

http://www.vupen.com/english/advisories/2008/0800/references

http://www.securityfocus.com/bid/28154

http://www.mailenable.com/hotfix/

http://secunia.com/advisories/29300

Details

Source: Mitre, NVD

Published: 2008-03-10

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.04045