CVE-2002-2357

Mailenable - Memory Corruption

Title source: rule

Description

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED

by redsand · cremotewindows

https://www.exploit-db.com/exploits/22023

View Code ZIP pw:eip

References (3)

[Exploit, Patch] http://www.securityfocus.com/bid/6197

[Third Party Advisory] http://www.iss.net/security_center/static/10652.php

[Third Party Advisory] http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html

Scores

EPSS 0.0335

EPSS Percentile 87.4%

Details

CWE

CWE-119

Status published

Products (4)

mailenable/mailenable 1.5015

mailenable/mailenable 1.5016

mailenable/mailenable 1.5017

mailenable/mailenable 1.5018

Published Dec 31, 2002

Tracked Since Feb 18, 2026