Secunia

Core Security Technologies has reported a vulnerability in MailEnable Professional and MailEnable Enterprise, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the IMAP service (MEIMAPS.exe) when handling the STATUS command. This can be exploited to cause a stack-based buffer overflow by passing an overly long string as mailbox name to the STATUS command.

Successful exploitation allows execution of arbitrary code.

The vulnerability affects Professional versions 1.5 through 1.54 and Enterprise versions 1.0 through 1.04.

Solution
Apply hotfix.
Further details available in Customer Area

Provided and/or discovered by
Ariel Sanchez from Core Security Technologies.

Changelog
Further details available in Customer Area

Original Advisory
Core Security Technologies:
http://www.coresecurity.com/common/showdoc.php?idx=467&idxseccion=10

Deep Links
Links available in Customer Area