Description
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Josh Zlatin-Amishav · textdoswindows
https://www.exploit-db.com/exploits/26575
References (9)
Core 9
Core References
Third Party Advisory third-party-advisory
x_refsource_sreason
http://securityreason.com/securityalert/205
Mailing List mailing-list
x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=113285451031500&w=2
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/417589/30/0/threaded
Exploit, Patch vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15556
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015268
Patch, Vendor Advisory x_refsource_misc
http://zur.homelinux.com/Advisories/MailEnableImapDos.txt
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/17740
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/21109
Third Party Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2005/2579
Scores
EPSS
0.0622
EPSS Percentile
90.9%
Details
Status
published
Products (2)
mailenable/mailenable_enterprise
1.1
mailenable/mailenable_professional
1.7
Published
Nov 26, 2005
Tracked Since
Feb 18, 2026