Secunia

Secunia Research has discovered two vulnerabilities in MailEnable, which can be exploited by malicious users to cause a DoS (Denial of service) or to compromise a vulnerable system.

1) A boundary error in the handling of arguments passed to the EXAMINE and SELECT commands within the IMAP service (MEIMAPS.EXE) can be exploited to cause a stack-based buffer overflow via an overly long argument.

Successful exploitation allows execution of arbitrary code.

2) An input validation error in the handling of arguments passed to the DELETE command within the IMAP service (MEIMAPS.EXE) can be exploited to cause a stack overflow and crash the service by sending an overly long argument consisting of "*" or "?" characters.

The vulnerability is confirmed in MailEnable Professional Edition Version 2.32, and reportedly affects the following versions as well:
* 1.6-1.83 Professional Edition
* 1.1-1.40 Enterprise Edition
* 2.0-2.33 Professional Edition
* 2.0-2.33 Enterprise Edition

Solution
Apply hotfix:
Further details available in Customer Area

Provided and/or discovered by
JJ Reyes, Secunia Research

Changelog
Further details available in Customer Area

Original Advisory
Secunia Research:
http://secunia.com/secunia_research/2006-71/

Deep Links
Links available in Customer Area