CVE-2006-6423

Related Files

MailEnable IMAPD (2.35) Login Request Buffer Overflow

Posted Nov 26, 2009

Authored by MC | Site metasploit.com

MailEnable's IMAP server contains a buffer overflow vulnerability in the Login command.

tags | exploit, overflow, imap

advisories | CVE-2006-6423

SHA-256 | a4eceb36c2639afe9fd1c656c7174c4475cb9596985d2e61b7f06f2ea8f79eea

Download | Favorite | View

secunia-meimap.txt

Posted Dec 11, 2006

Authored by JJ Reyes | Site secunia.com

Secunia Research has discovered a vulnerability in MailEnable Professional Edition version 2.35, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to a boundary error when processing data sent to the IMAP server. This can be exploited to cause a stack-based buffer overflow by first sending a command in the "Not Authenticated" state (e.g. "login" command) with a specially crafted parameter to make the IMAP service wait for more incoming data and then sending an overly long string (greater than 512 bytes).

tags | advisory, overflow, imap

advisories | CVE-2006-6423

SHA-256 | 50845d9664d4795bef5673fb158d9b6f36ae9ac4b5a0fc08c947afcdd0f0ba55

Download | Favorite | View