Denial of Service Vulnerability in MailEnable SMTP Service
CVE-2006-3277

Currently unrated

Key Information:

Vendor: Mailenable
Status: Mailenable Professional; Mailenable Enterprise
Vendor: CVE Published:; 28 June 2006

What is CVE-2006-3277?

The MailEnable SMTP service is vulnerable to a denial of service attack, allowing remote attackers to crash the application. This occurs when an attacker sends a HELO command containing a null byte in the argument, potentially leading to inconsistencies in length checks or a missing argument scenario. All versions of MailEnable Standard prior to 1.92, Professional prior to 2.0, and Enterprise prior to 2.0, are affected unless patched with the MESMTPC hotfix.