Buffer Overflow Vulnerability in MailEnable IMAP Service
CVE-2008-1276

Currently unrated

Key Information:

Vendor

Mailenable

Vendor
CVE Published:
10 March 2008

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC๐ŸŸฃ EPSS 13%

What is CVE-2008-1276?

The IMAP service in MailEnable Professional and Enterprise Editions versions 3.13 and earlier is vulnerable to multiple buffer overflow issues. Attackers with authenticated access can exploit these vulnerabilities by sending specially crafted long arguments to commands such as FETCH, EXAMINE, and UNSUBSCRIBE, potentially allowing them to execute arbitrary code on the server. This could lead to unauthorized control over the affected system, compromising data integrity and security.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

EPSS Score

13% chance of being exploited in the next 30 days.

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.