MailEnable IMAP Server (meimaps.exe) Crafted RENAME Command Remote DoS
Medium Nessus Plugin ID 20245
SynopsisThe remote IMAP server is prone to denial of service attacks.
DescriptionThe remote host is running MailEnable, a commercial mail server for Windows.
The IMAP server bundled with the version of MailEnable Professional or Enterprise Edition installed on the remote host is prone to crash due to incorrect handling of mailbox names in the rename command. An authenticated, remote attacker can exploit this flaw to crash the IMAP server on the remote host.
SolutionApply the IMAP Cumulative Hotfix/Update provided in the zip file referenced above.