Vulnerabilities > CVE-2008-1275 - Denial of Service vulnerability in Mailenable products

CVSS 7.8 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

COMPLETE

network

low complexity

mailenable

exploit available

NVD

Published: 2008-03-10

Updated: 2017-09-29

Summary

Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x, Professional Edition 3.x and earlier, and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.

Vulnerable Configurations

Part	Description	Count
Application	Mailenable Mailenable Mailenable Enterprise * Mailenable Mailenable Professional * Mailenable Mailenable Standard *	3

Exploit-Db

id	EDB-ID:5235

References

http://secunia.com/advisories/29300
http://www.mailenable.com/hotfix/
http://www.securityfocus.com/bid/28154
http://www.vupen.com/english/advisories/2008/0800/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41083
https://www.exploit-db.com/exploits/5235