This script is Copyright (C) 2006-2016 Tenable Network Security, Inc.
The remote IMAP server is affected by multiple buffer overflow
The IMAP server bundled with the version of MailEnable installed on the
remote host reportedly fails to handle malicious arguments to the
'EXAMINE', 'SELECT', and 'DELETE' commands. An authenticated, remote
attacker may be able to exploit these issues to crash the affected
service or to execute arbitrary code with LOCAL SYSTEM privileges.
See also :
Apply Hotfix ME-10021.
Note that ME-10020 was initially listed as a solution, but it turns out
to be only a partial fix. Affected users should apply ME-10021 to fully
address the issue.
Risk factor :
Medium / CVSS Base Score : 6.8
CVSS Temporal Score : 5.0
Public Exploit Available : false