CVE-2006-6423
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
60Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 71%
from disclosure to weapon66 days
Published on NVDDec 12
1st PoC+66d
metasploitDec 11
Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.
Affected products
n/a · n/apublic PoCs found — 3✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3319exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/16475exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/3320⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://secunia.com/advisories/23201http://secunia.com/secunia_research/2006-73/advisory/http://securityreason.com/securityalert/2022https://exchange.xforce.ibmcloud.com/vulnerabilities/30796http://www.mailenable.com/hotfix/http://www.securityfocus.com/archive/1/454075/100/0/threadedhttp://www.securityfocus.com/bid/21492