← back
CVE-2006-3277

CVE-2006-3277

EPSS 6.0%
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/28103unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/20790http://securitytracker.com/id?1016376https://exchange.xforce.ibmcloud.com/vulnerabilities/27387http://www.divisionbyzero.be/?p=173http://www.divisionbyzero.be/?p=174http://www.mailenable.com/hotfix/mesmtpc.ziphttp://www.osvdb.org/26791http://www.securityfocus.com/archive/1/438374/100/0/threadedhttp://www.securityfocus.com/bid/18630http://www.vupen.com/english/advisories/2006/2520