CVE-2005-4456
MailEnable Professional <1.71 & Enterprise <1.1 - Buffer Overflow
Title source: llmDescription
Multiple buffer overflows in MailEnable Professional 1.71 and Enterprise 1.1 before patch ME-10009 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via long (1) LIST, (2) LSUB, and (3) UID FETCH commands. NOTE: it is possible that these are alternate vectors for the issue described in CVE-2005-4402.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by muts · pythonremotewindows
https://www.exploit-db.com/exploits/1378
References (3)
Core 3
Core References
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/18134
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/15985
Exploit, Patch, Vendor Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html
Scores
EPSS
0.0547
EPSS Percentile
90.2%
Details
Status
published
Products (2)
mailenable/mailenable_enterprise
1.1
mailenable/mailenable_professional
1.71
Published
Dec 21, 2005
Tracked Since
Feb 18, 2026