MailEnable IMAP code execution

mailenable-imap-code-execution (18286) The risk level is classified as HighHigh Risk

Description:

MailEnable could allow a remote attacker to execute arbitrary code on the system. By sending a long string and then terminating the connection, a remote attacker could cause an object pointer overwrite and execute arbitrary code on the system with IMAP service privileges.

Platforms Affected:

  • MailEnable, MailEnable Enterprise Edition 1.01
  • MailEnable, MailEnable Professional Edition 1.52
  • Microsoft, Windows 2000 SP4 Professional

Remedy:

Apply the MEIMAPS-HF041125 Hotfix for this vulnerability, as listed in Hat-Squad Advisory November 25, 2004. See References.

Consequences:

Gain Access

References:

  • BugTraq Mailing List, Thu Nov 25 2004 - 09:45:08 CST , Remote buffer overflow in MailEnable IMAP service [Hat-Squad Advisory] at http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.html.
  • Hat-Squad Advisory November 25, 2004, Remote buffer overflow in MailEnable IMAP service at http://www.hat-squad.com/en/000102.html.
  • BID-11755: MailEnable IMAP Service Multiple Remote Pre-Authentication Buffer Overflow Vulnerabilities
  • CVE-2004-2501: Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection.
  • OSVDB ID: 12135: MailEnable IMAP Remote Stack Overflow
  • OSVDB ID: 12136: MailEnable IMAP Remote Object Pointer Overwrite
  • SA13318: MailEnable IMAP Service Buffer Overflow Vulnerabilities
  • SECTRACK ID: 1012327: MailEnable Stack Overflow and Pointer Overwrite in IMAP Service Lets Remote Users Execute Arbitrary Code

Reported:

Nov 26, 2004

The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.

For corrections or additions please email xforce@iss.net

Return to the main page