• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

MailEnable IMAP Mailbox Name Buffer Overflow Vulnerability

MailEnable is prone to a buffer overflow vulnerability in multiple IMAP commands. The issue is due to improper bounds checking on the mailbox name argument supplied to various commands.

This issue is reported to affect MailEnable Professional 1.6 with Hotfix MEIMAPS-UPD0511010000.zip and MailEnable Enterprise 1.1 with Hotfix MEIMAPS-UPD0511010000.zip. Other versions may also be vulnerable.