CVE-2006-6291

MailEnable Professional/Enterprise 1.6-2.33 Authenticated DoS via IMAP DELETE

Title source: llm
STIX 2.1

Description

Stack overflow in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.83 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.40 and 2.0 through 2.33, allows remote authenticated users to cause a denial of service (crash) via a long argument containing * (asterisk) and ? (question mark) characters to the DELETE command, as addressed by the ME-10020 hotfix.

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017276
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/4778
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/23080
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/21362
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1017319
Patch x_refsource_confirm
http://www.mailenable.com/hotfix/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/453118/100/100/threaded

Scores

EPSS 0.0309
EPSS Percentile 86.2%

Details

CWE
CWE-119
Status published
Products (2)
mailenable/mailenable 1.1 - 1.40
mailenable/mailenable 1.6 - 1.83
Published Dec 05, 2006
Tracked Since Feb 18, 2026