CVE-2008-1276

Description

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

References

https://www.exploit-db.com/exploits/5249

https://exchange.xforce.ibmcloud.com/vulnerabilities/41058

http://www.vupen.com/english/advisories/2008/0799/references

http://www.securitytracker.com/id?1019565

http://www.securityfocus.com/archive/1/489270/100/0/threaded

http://securityreason.com/securityalert/3724

http://secunia.com/advisories/29277

http://aluigi.altervista.org/adv/maildisable-adv.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS