CVE-2008-1277

MailEnable Professional and Enterprise < 3.13 - Denial of Service via IMAP SEARCH and APPEND Commands

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-1277. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text describes multiple remote vulnerabilities in MailEnable's IMAP service, including buffer overflows and denial-of-service issues due to NULL-pointer exceptions. It references external links for exploit binaries but does not contain actual exploit code.

Description

The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdoswindows
https://www.exploit-db.com/exploits/31360

The provided text describes multiple remote vulnerabilities in MailEnable's IMAP service, including buffer overflows and denial-of-service issues due to NULL-pointer exceptions. It references external links for exploit binaries but does not contain actual exploit code.

Classification
Writeup 90%
Attack Type
Rce | Dos
Complexity
Moderate
Reliability
Theoretical
Target: MailEnable 3.13
No auth needed
Prerequisites: Network access to the IMAP service
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/29277
Third Party Advisory x_refsource_misc
http://aluigi.altervista.org/adv/maildisable-adv.txt
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/0799/references
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3724
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489270/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id?1019565
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/28145
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/41059

Scores

EPSS 0.0825
EPSS Percentile 94.2%

Details

CWE
CWE-20
Status published
Products (2)
mailenable/mailenable_enterprise < 3.13
mailenable/mailenable_professional < 3.13
Published Mar 10, 2008
Tracked Since Feb 18, 2026