CVE-2006-6423

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

70.71% chance of exploitation in the next 30 days, 99th percentile

Published

2006-12-12

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/imap/mailenable_login.rb

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/16475
• https://www.exploit-db.com/exploits/3320
• https://www.exploit-db.com/exploits/3319

Security advisories

• http://secunia.com/secunia_research/2006-73/advisory
• http://www.mailenable.com/hotfix
• http://www.securityfocus.com/bid/21492

References

• CVE Record
• NVD entry