IMAP: MailEnable IMAP Service Buffer Overflow

This signature detects attempts to exploit a known vulnerability exists in the way the IMAP service in MailEnable parses IMAP data. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

MailEnable IMAP service is reported prone to multiple remote buffer overflow vulnerabilities. The following individual issues are reported: The first buffer overflow vulnerability is reported to exist due to a lack of sufficient bounds checking performed on IMAP command arguments before the argument is copied into a finite process memory buffer. A remote attacker may exploit this vulnerability prior to authentication to execute arbitrary code in the context of the affected service. The second buffer overflow vulnerability presents itself due to a lack of boundary checks performed on request data sent to the IMAP service. A remote attacker may exploit this vulnerability prior to authentication to execute arbitrary code in the context of the affected service.

Affected Products

Mailenable mailenable_professional

References

BugTraq: 11755

CVE: CVE-2004-2501

Short Name

IMAP:OVERFLOW:MAILENABLE-BO

Severity

Major

Recommended

False

Recommended Action

Drop

IMAP: MailEnable IMAP Service Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?