OSVDB ID: 12136

Title: MailEnable IMAP Remote Object Pointer Overwrite

Info

Disclosure

Nov 25, 2004

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in MailEnable's IMAP service. The IMAP service contains boundary errors which result in an Object Pointer Overwrite overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Currently, there are no known workarounds or upgrades to correct this issue. However, vendor has released a patch to address this vulnerability.

Products

MailEnable Pty. Ltd.

MailEnable Professional Edition

1.52

MailEnable Enterprise Edition

1.01

References

Credit

  • Nima Majidi - nima_majidiBrand New Doo Doohat-squad.com -
  • idespinner - idespinnerBrand New Doo Doohat-squad.com -
  • class101 - class101Brand New Doo Doohat-squad.com -


Direct URL: http://osvdb.org/36218