MailEnable IMAP Server (meimaps.exe) Crafted RENAME Command Remote DoS

Medium Nessus Plugin ID 20245


The remote IMAP server is prone to denial of service attacks.


The remote host is running MailEnable, a commercial mail server for Windows.

The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to incorrect handling of mailbox names in the rename command. An authenticated, remote attacker can exploit this flaw to crash the IMAP server on the remote host.


Apply the IMAP Cumulative Hotfix/Update provided in the zip file referenced above.

See Also

Plugin Details

Severity: Medium

ID: 20245

File Name: mailenable_imap_rename_dos.nasl

Version: $Revision: 1.20 $

Type: remote

Agent: windows

Family: Windows

Published: 2005/11/28

Modified: 2011/09/01

Dependencies: 10263, 11414

Risk Information

Risk Factor: Medium


Base Score: 4

Temporal Score: 3.5

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:P

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:mailenable:mailenable

Required KB Items: imap/login, imap/password

Excluded KB Items: imap/false_imap, imap/overflow

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2005/11/24

Reference Information

CVE: CVE-2005-3813

BID: 15556

OSVDB: 21109