CVE-2002-2357

MailEnable 1.5 015-1.5 018 - Denial of Service via Long USER String

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-2357. PoCs published by redsand.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in MailEnable POP3 server version 1.02 by sending an overly long USER field. It demonstrates a denial-of-service (DoS) condition by crashing the service.

Description

MailEnable 1.5 015 through 1.5 018 allows remote attackers to cause a denial of service (crash) via a long USER string, possibly due to a buffer overflow.

Exploits (1)

exploitdb WORKING POC VERIFIED
by redsand · cremotewindows
https://www.exploit-db.com/exploits/22023

This exploit targets a buffer overflow vulnerability in MailEnable POP3 server version 1.02 by sending an overly long USER field. It demonstrates a denial-of-service (DoS) condition by crashing the service.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: MailEnable POP Server Version 1.02
No auth needed
Prerequisites: Network access to the vulnerable POP3 server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/6197
Third Party Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/10652.php
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-11/0236.html

Scores

EPSS 0.0299
EPSS Percentile 85.6%

Details

CWE
CWE-119
Status published
Products (4)
mailenable/mailenable 1.5015
mailenable/mailenable 1.5016
mailenable/mailenable 1.5017
mailenable/mailenable 1.5018
Published Dec 31, 2002
Tracked Since Feb 18, 2026