MailEnable Enterprise 1.1 before patch ME-10009 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via several "..." (triple dot) sequences in a UID FETCH command.
References
Link | Resource |
---|---|
http://seclists.org/lists/fulldisclosure/2005/Dec/1036.html | Exploit Patch Vendor Advisory |
http://secunia.com/advisories/18134 |
Configurations
Information
Published : 2005-12-21 03:03
Updated : 2008-09-05 13:56
NVD link : CVE-2005-4457
Mitre link : CVE-2005-4457
JSON object : View
CWE
Products Affected
mailenable
- mailenable_enterprise