CVE-2008-1276

Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.

CVSS v2.0

9.0 HIGHAV:N/AC:L/Au:S/C:C/I:C/A:C

EPSS

7.09% chance of exploitation in the next 30 days, 94th percentile

Published

2008-03-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/5249

References

• CVE Record
• NVD entry

Related

• CVE-2008-1275
• CVE-2008-1277
• CVE-2008-1273
• CVE-2008-1278
• CVE-2008-1272
• CVE-2008-1281