Title: MailEnable IMAP Service (meimaps.exe) Crafted RENAME Command Remote DoS
Info
Disclosure
Nov 24, 2005
Discovery
Unknown
Dates
Exploit
Nov 24, 2005
Solution
Unknown
Description
MailEnable contains a flaw that may allow a remote denial of service. The issue is triggered when an authenticated user sends an IMAP rename message with non-existent mailbox names to the IMAP server, and will result in loss of availability for the service.
Classification
Location:
Remote / Network Access
Attack Type:
Denial of Service
Impact:
Loss of Availability
Exploit:
Exploit Public
Disclosure:
OSVDB Verified
Solution
Currently, there are no known workarounds or upgrades to correct this issue. However, MailEnable has released a hotfix to address this vulnerability.