Nessus Plugin #15487

Plugin Index

Note: This file has been created from a downloaded version of the Nessus Plugins from http://www.nessus.org/. Therefore, the information here can be outdated.

MailEnable IMAP Service Search DoS Vulnerability

Family:

Denial of Service

Category:

denial

Copyright:

This script is Copyright (C) 2004 George A. Theall

Summary:

Checks for Search DoS Vulnerability in MailEnable's IMAP Service

Version:

$Revision: 1.3 $

Cve_id:

-

Bugtraq_id:

11418

Xrefs:

OSVDB:10728

Description:

The target is running at least one instance of MailEnable's IMAP
service. A flaw exists in MailEnable Professional Edition versions
1.5a-d that results in this service crashing if it receives a SEARCH
command. An authenticated user could send this command either on
purpose as a denial of service attack or unwittingly since some IMAP
clients, such as IMP and Vmail, use it as part of the normal login
process.

Solution : Upgrade to MailEnable Professional 1.5e or later.

Risk factor : Medium