Detections
Analytics
MailEnable IMAP Service Remote DoS
medium Nessus Network Monitor Plugin ID 3302
Synopsis
The remote host is vulnerable to a Denial of Service (DoS) attack.Description
The remote host is running a version of MailEnable's IMAP service that is prone to a remote Denial of Service (DoS) attack. Specifically, an attacker requesting a nonexistent mailbox can crash the service. An attacker exploiting this flaw would need to be able to authenticate with some valid user account. Following successful authentication, the attacker would request a nonexistent mailbox. Successful exploitation leads to a loss of availability.Solution
Upgrade to MailEnable Professional 1.7.1 or higher or to MailEnable Enterprise Edition 1.2 or higher.See Also
Plugin Details
Severity: Medium
ID: 3302
Family: IMAP Servers
Published: 11/28/2005
Updated: 3/6/2019
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 4.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS v3
Risk Factor: Medium
Base Score: 5.3
Temporal Score: 5.1
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Temporal Vector: CVSS:3.0/E:H/RL:O/RC:C
Vulnerability Information
CPE: cpe:/a:mailenable:mailenable