Description
Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.
References
- 1017395 vdb-entry
- 23127 third-party-advisory
- 2053 third-party-advisory
- http://www.mailenable.com/hotfix/
- 21645 vdb-entry
- 20061218 Secunia Research: MailEnable POP Service "PASS" Command BufferOverflow mailing-list
- http://secunia.com/secunia_research/2006-75/advisory/
- ADV-2006-5052 vdb-entry