CVE-2006-6423
MailEnable Professional and Enterprise Edition 1.1-2.35 - Stack-Based Buffer Overflow via IMAP Service
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2006-6423.
PoCs published by Metasploit, mu-b, MC, including Metasploit module exploits/windows/imap/mailenable_login.
AI-analyzed exploit summary This is a Metasploit module exploiting a buffer overflow in MailEnable IMAPD 2.35 via a malformed LOGIN command. It sends a crafted payload to achieve remote code execution on the target system.
Description
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
Exploits (4)
This is a Metasploit module exploiting a buffer overflow in MailEnable IMAPD 2.35 via a malformed LOGIN command. It sends a crafted payload to achieve remote code execution on the target system.
This exploit targets a buffer overflow vulnerability in Mail Enable Professional <=v2.35. It sends a crafted payload to the IMAP service (port 143) to achieve remote code execution via a win32 bind shell on port 1337.
This exploit targets a buffer overflow vulnerability in Mail Enable Professional/Enterprise versions 2.32-4. It sends a crafted payload to the IMAP service (port 143) to achieve remote code execution via a win32 bind shell on port 1337.
This Metasploit module exploits a buffer overflow vulnerability in MailEnable IMAPD versions 2.34 and 2.35 via a malformed LOGIN command. It sends a crafted payload to achieve remote code execution on the target system.