Vulnerability Assessment & Network Security Forums



If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important.  If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery.


Home >> Browse Vulnerability Assessment Database >> Denial of Service >> MailEnable HTTPMail Service Authorization Buffer Overflow Vulnerability


Vulnerability Assessment Details

MailEnable HTTPMail Service Authorization Buffer Overflow Vulnerability

Vulnerability Assessment Summary
Checks for Authorization Buffer Overflow Vulnerability in MailEnable HTTPMail Service

Detailed Explanation for this Vulnerability Assessment

The target is running at least one instance of MailEnable -
http://www.mailenable.com/ - that has a flaw in the HTTPMail service
(MEHTTPS.exe) in the Professional and Enterprise Editions. The flaw
can be exploited by issuing an HTTP request with a malformed
Authorization header, which causes a buffer overflow in HTTPMail
service.
Successful exploitation will result in code execution on the remote
host.

Solution : Apply hotfix : HTTPMail Fix - For MailEnable Professional
and Enterprise (65k) - 22nd April 2005.
See also : http://www.mailenable.com/hotfix/

Network Security Threat Level: High

Networks Security ID: 13350

Vulnerability Assessment Copyright: This script is Copyright (C) 2005-2006 Tenable Network Security

Cables, Connectors

L-C3750X-24-S-E IP Base to IP Services Upgrade License E-Delivery via Email
$450.0
L-C3750X-24-S-E  IP Base to IP Services Upgrade License E-Delivery via Email pictureNetGear FS608 v3 8 Port LAN 10/100 Mbps Switch w/ original working AC Adapter
$8.0
NetGear FS608 v3 8 Port LAN 10/100 Mbps Switch w/ original working AC Adapter pictureCisco (N2K-C2248TPE-1GE) Rack-Mountable Network Device **Please see details**
$255.0
Cisco  (N2K-C2248TPE-1GE) Rack-Mountable Network Device **Please see details** pictureBrocade FastIron FCX648S-ADV 48 ports of 10/100/1000 Mbps Ethernet Switch
$299.0
Brocade FastIron FCX648S-ADV 48 ports of 10/100/1000 Mbps Ethernet Switch picture


Discussions

No Discussions have been posted on this vulnerability.