Denial of Service Vulnerability in MailEnable Products
CVE-2006-6484

Currently unrated

Key Information:

Vendor

Mailenable

Status
Mailenable Enterprise
Mailenable Professional
Vendor
CVE Published:
12 December 2006

What is CVE-2006-6484?

The IMAP service in MailEnable's Professional and Enterprise Editions is susceptible to denial of service attacks due to a null pointer dereference. This vulnerability impacts versions 1.6 through 1.83 of Professional Edition and 1.1 through 1.40 of Enterprise Edition, as well as versions 2.0 through 2.34 of both editions. Attackers can exploit this vulnerability remotely through unspecified vectors, potentially causing the service to crash. MailEnable has provided a hotfix (ME-10023) to mitigate this issue, which is distinct from another related vulnerability.

References

http://www.securityfocus.com/bid/21493
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/30797
vdb-entryx_refsource_XF
http://secunia.com/advisories/23267
third-party-advisoryx_refsource_SECUNIA

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.