Vulnerabilities > CVE-2005-3155 - Buffer Overflow vulnerability in MailEnable W3C Logging
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Exploit-Db
description MailEnable IMAPD W3C Logging Buffer Overflow. CVE-2005-3155. Remote exploit for windows platform id EDB-ID:16480 last seen 2016-02-01 modified 2010-06-15 published 2010-06-15 reporter metasploit source https://www.exploit-db.com/download/16480/ title MailEnable IMAPD W3C Logging Buffer Overflow description MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit. CVE-2005-3155. Remote exploit for windows platform id EDB-ID:1332 last seen 2016-01-31 modified 2005-11-20 published 2005-11-20 reporter y0 source https://www.exploit-db.com/download/1332/ title MailEnable 1.54 Pro Universal IMAPD W3C Logging BoF Exploit
Metasploit
| description | This module exploits a buffer overflow in the W3C logging functionality of the MailEnable IMAPD service. Logging is not enabled by default and this exploit requires a valid username and password to exploit the flaw. MailEnable Professional version 1.6 and prior and MailEnable Enterprise version 1.1 and prior are affected. |
| id | MSF:EXPLOIT/WINDOWS/IMAP/MAILENABLE_W3C_SELECT |
| last seen | 2020-02-29 |
| modified | 2017-07-24 |
| published | 2005-12-05 |
| references | https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3155 |
| reporter | Rapid7 |
| source | https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/windows/imap/mailenable_w3c_select.rb |
| title | MailEnable IMAPD W3C Logging Buffer Overflow |
Nessus
| NASL family | Windows |
| NASL id | MAILENABLE_IMAP_LOGGING_OVERFLOW.NASL |
| description | The remote host is running a version of MailEnable |
| last seen | 2020-06-01 |
| modified | 2020-06-02 |
| plugin id | 19783 |
| published | 2005-10-04 |
| reporter | This script is Copyright (C) 2005-2018 Tenable Network Security, Inc. |
| source | https://www.tenable.com/plugins/nessus/19783 |
| title | MailEnable IMAP Server W3C Logging Overflow |
Packetstorm
| data source | https://packetstormsecurity.com/files/download/83006/mailenable_w3c_select.rb.txt |
| id | PACKETSTORM:83006 |
| last seen | 2016-12-05 |
| published | 2009-11-26 |
| reporter | MC |
| source | https://packetstormsecurity.com/files/83006/MailEnable-IMAPD-W3C-Logging-Buffer-Overflow.html |
| title | MailEnable IMAPD W3C Logging Buffer Overflow |
Saint
| bid | 15006 |
| description | MailEnable IMAP W3C Logging Buffer Overflow |
| id | mail_imap_mailenable,mail_imap_mailenableent |
| osvdb | 19842 |
| title | mailenable_imap_w3c_logging |
| type | remote |