CVE-2006-1337
MailEnable < 1.93/1.73/1.21 - Unauthenticated RCE via POP3 Buffer Overflow
Title source: llmDescription
Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.
References (10)
Core 10
Core References
Various Sources x_refsource_confirm
http://www.mailenable.com/professionalhistory.asp
Various Sources x_refsource_confirm
http://www.mailenable.com/enterprisehistory.asp
Various Sources x_refsource_confirm
http://www.mailenable.com/standardhistory.asp
Patch, Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/19288
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/17162
Third Party Advisory mailing-list
x_refsource_fulldisc
http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/25314
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1015797
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2006/1006
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/24012
Scores
EPSS
0.0485
EPSS Percentile
91.0%
Details
CWE
CWE-119
Status
published
Products (31)
mailenable/mailenable
1.2
mailenable/mailenable
1.2a
mailenable/mailenable
1.5
mailenable/mailenable
1.6
mailenable/mailenable
1.7
mailenable/mailenable
1.17
mailenable/mailenable
1.18
mailenable/mailenable
1.19
mailenable/mailenable
1.51
mailenable/mailenable
1.52
... and 21 more
Published
Mar 21, 2006
Tracked Since
Feb 18, 2026