Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2008-1277

Description

The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.

POC

Reference

- http://aluigi.altervista.org/adv/maildisable-adv.txt

- http://securityreason.com/securityalert/3724

Github

No PoCs found on GitHub currently.