Evil-DB LogoEvil-DB
← All CVEs

CVE-2006-6423

high · 10

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

10
CVSS
70.7%
EPSS (exploit prob.)
99th
EPSS percentile
2006-12-12
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

VendorProductAffected versions
mailenablemailenable_enterprise1.1
mailenablemailenable_enterprise1.2
mailenablemailenable_enterprise1.11
mailenablemailenable_enterprise1.12
mailenablemailenable_enterprise1.13
mailenablemailenable_enterprise1.14
mailenablemailenable_enterprise1.15
mailenablemailenable_enterprise1.16
mailenablemailenable_enterprise1.17
mailenablemailenable_enterprise1.18
mailenablemailenable_enterprise1.19
mailenablemailenable_enterprise1.21
mailenablemailenable_enterprise1.22
mailenablemailenable_enterprise1.23
mailenablemailenable_enterprise1.24
mailenablemailenable_enterprise1.25
mailenablemailenable_enterprise1.26
mailenablemailenable_enterprise1.27
mailenablemailenable_enterprise1.28
mailenablemailenable_enterprise1.29
mailenablemailenable_enterprise1.30
mailenablemailenable_enterprise1.31
mailenablemailenable_enterprise1.32
mailenablemailenable_enterprise1.33
mailenablemailenable_enterprise1.34
mailenablemailenable_enterprise1.35
mailenablemailenable_enterprise1.36
mailenablemailenable_enterprise1.37
mailenablemailenable_enterprise1.38
mailenablemailenable_enterprise1.39
mailenablemailenable_enterprise1.40
mailenablemailenable_enterprise1.41
mailenablemailenable_enterprise2.35
mailenablemailenable_professional1.84

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-6423