CVE-2006-3277: Medium severity Mailenable Mailenable Enterprise vulnerability

Q: What is the severity of CVE-2006-3277?

CVE-2006-3277 has been classified as having a high severity due to its potential to cause a denial of service by crashing the MailEnable application.

Q: How do I fix CVE-2006-3277?

To fix CVE-2006-3277, you should apply the MESMTPC hotfix provided by MailEnable for the affected versions.

Q: Which versions are affected by CVE-2006-3277?

CVE-2006-3277 affects MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier.

Q: What type of vulnerability is CVE-2006-3277?

CVE-2006-3277 is a denial of service vulnerability that can be triggered by malformed HELO commands.

Q: Can CVE-2006-3277 be exploited remotely?

Yes, CVE-2006-3277 can be exploited remotely by sending a specially crafted HELO command with a null byte.

Published Jun 28, 2006

Updated

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

Affected Software

73 affected components

Mailenable Mailenable Enterprise<=1.00

Mailenable Mailenable Enterprise<=1.01

Mailenable Mailenable Enterprise<=1.1

Mailenable Mailenable Enterprise<=1.2

Mailenable Mailenable Enterprise<=1.02

Mailenable Mailenable Enterprise<=1.03

Mailenable Mailenable Enterprise<=1.04

Mailenable Mailenable Enterprise<=1.21

MailEnable MailEnable Professional=1.0.004

MailEnable MailEnable Professional=1.0.005

MailEnable MailEnable Professional=1.0.006

MailEnable MailEnable Professional=1.0.007

MailEnable MailEnable Professional=1.0.008

MailEnable MailEnable Professional=1.0.009

MailEnable MailEnable Professional=1.0.010

MailEnable MailEnable Professional=1.0.011

MailEnable MailEnable Professional=1.0.012

MailEnable MailEnable Professional=1.0.013

MailEnable MailEnable Professional=1.0.014

MailEnable MailEnable Professional=1.0.015

MailEnable MailEnable Professional=1.0.016

MailEnable MailEnable Professional=1.0.017

MailEnable MailEnable Professional=1.1

MailEnable MailEnable Professional=1.2

MailEnable MailEnable Professional=1.2a

MailEnable MailEnable Professional=1.5

MailEnable MailEnable Professional=1.6

MailEnable MailEnable Professional=1.7

MailEnable MailEnable Professional=1.8

MailEnable MailEnable Professional=1.9

MailEnable MailEnable Professional=1.12

MailEnable MailEnable Professional=1.13

MailEnable MailEnable Professional=1.14

MailEnable MailEnable Professional=1.15

MailEnable MailEnable Professional=1.16

MailEnable MailEnable Professional=1.17

MailEnable MailEnable Professional=1.18

MailEnable MailEnable Professional=1.19

MailEnable MailEnable Professional=1.51

MailEnable MailEnable Professional=1.52

MailEnable MailEnable Professional=1.53

MailEnable MailEnable Professional=1.54

MailEnable MailEnable Professional=1.71

MailEnable MailEnable Professional=1.72

MailEnable MailEnable Professional=1.73

MailEnable MailEnable Professional=1.91

MailEnable MailEnable Professional=1.92

MailEnable MailEnable Professional=1.93

MailEnable MailEnable Professional=1.101

MailEnable MailEnable Professional=1.102

MailEnable MailEnable Professional=1.103

MailEnable MailEnable Professional=1.104

MailEnable MailEnable Professional=1.105

MailEnable MailEnable Professional=1.106

MailEnable MailEnable Professional=1.107

MailEnable MailEnable Professional=1.108

MailEnable MailEnable Professional=1.109

MailEnable MailEnable Professional=1.110

MailEnable MailEnable Professional=1.111

MailEnable MailEnable Professional=1.112

MailEnable MailEnable Professional=1.113

MailEnable MailEnable Professional=1.114

MailEnable MailEnable Professional=1.115

MailEnable MailEnable Professional=1.116

MailEnable MailEnable Professional=1.610

MailEnable MailEnable Professional=1.701

MailEnable MailEnable Professional=1.702

MailEnable MailEnable Professional=1.703

MailEnable MailEnable Professional=1.704

MailEnable MailEnable Professional=1.5015

MailEnable MailEnable Professional=1.5016

MailEnable MailEnable Professional=1.5017

MailEnable MailEnable Professional=1.5018

Remediation

Patch Available

http://www.divisionbyzero.be/?p=173

Patch Available

http://www.mailenable.com/hotfix/mesmtpc.zip

Event History

Jun 28, 2006

CVE Published

10:05 PM

Jun 29, 2006

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2006-3277?

CVE-2006-3277 has been classified as having a high severity due to its potential to cause a denial of service by crashing the MailEnable application.

How do I fix CVE-2006-3277?

To fix CVE-2006-3277, you should apply the MESMTPC hotfix provided by MailEnable for the affected versions.

Which versions are affected by CVE-2006-3277?

CVE-2006-3277 affects MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier.

What type of vulnerability is CVE-2006-3277?

CVE-2006-3277 is a denial of service vulnerability that can be triggered by malformed HELO commands.

Can CVE-2006-3277 be exploited remotely?

Yes, CVE-2006-3277 can be exploited remotely by sending a specially crafted HELO command with a null byte.

CVE-2006-3277: Medium severity Mailenable Mailenable Enterprise vulnerability

Affected Software

Remediation

Patch Available

Patch Available

Event History

Frequently Asked Questions

What is the severity of CVE-2006-3277?

How do I fix CVE-2006-3277?

Which versions are affected by CVE-2006-3277?

What type of vulnerability is CVE-2006-3277?

Can CVE-2006-3277 be exploited remotely?

Company

Resources

Contact