CVE-2005-1013

MailEnable Enterprise <= 1.04 and Professional <= 1.54 - Denial of Service via SMTP EHLO Unicode String

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1013. PoCs published by CorryL.

AI-analyzed exploit summary This exploit targets a denial-of-service vulnerability in MailEnable SMTP servers by sending a malformed EHLO command with an unicode string. It establishes a TCP connection to port 25 and sends the payload, causing the SMTP service to crash.

Description

The SMTP service in MailEnable Enterprise 1.04 and earlier and Professional 1.54 and earlier allows remote attackers to cause a denial of service (server crash) via an EHLO command with a Unicode string.

Exploits (1)

exploitdb WORKING POC VERIFIED

by CorryL · perldoswindows

https://www.exploit-db.com/exploits/916

View Code ZIP pw:eip

This exploit targets a denial-of-service vulnerability in MailEnable SMTP servers by sending a malformed EHLO command with an unicode string. It establishes a TCP connection to port 25 and sends the payload, causing the SMTP service to crash.

Classification

Working Poc 90%

Attack Type

Dos

Complexity

Trivial

Reliability

Reliable

Target: MailEnable (Enterprise <= 1.04, Professional <= 1.54)

No auth needed

Prerequisites: Network access to the target SMTP server (port 25)

MITRE ATT&CK