CVE-2006-6423: Buffer Overflow
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6423?
CVE-2006-6423 is classified as a critical severity vulnerability due to the potential for remote code execution.
How do I fix CVE-2006-6423?
To fix CVE-2006-6423, you should upgrade to a patched version of MailEnable that addresses this buffer overflow vulnerability.
What versions are affected by CVE-2006-6423?
CVE-2006-6423 affects multiple versions of MailEnable Professional and Enterprise Edition from 1.1 to 2.35.
Can CVE-2006-6423 affect my email service?
Yes, if your email service uses an affected version of MailEnable, you are at risk of exploitation due to CVE-2006-6423.
What type of attack is associated with CVE-2006-6423?
CVE-2006-6423 allows remote attackers to execute arbitrary code via a pre-authentication command, leading to a stack-based buffer overflow.