PT-2005-2036 · Mailenable · Mailenable Professional+1
CVSS v2.0
5.0
Média
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:P |
Name of the Vulnerable Software and Affected Versions
MailEnable Enterprise versions 1.04 and earlier
MailEnable Professional versions 1.54 and earlier
Description
The issue allows remote attackers to cause a denial of service, resulting in a server crash. This is achieved by sending an EHLO command that contains a Unicode string to the SMTP service.
Recommendations
For MailEnable Enterprise versions 1.04 and earlier, update to a version later than 1.04 to resolve the issue.
For MailEnable Professional versions 1.54 and earlier, update to a version later than 1.54 to resolve the issue.
As a temporary workaround, consider restricting access to the SMTP service to minimize the risk of exploitation.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Mailenable Enterprise
Mailenable Professional