Secunia

A vulnerability has been discovered in MailEnable, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to a NULL pointer dereference error when handling data sent to the IMAP service. This can be exploited to crash the system via a specially crafted sequence of commands and data.

The vulnerability is confirmed in MailEnable Professional 2.32 with Hotfix ME-10021 applied. The following versions are reportedly affected:
* 1.6-1.83 Professional Edition
* 1.1-1.40 Enterprise Edition
* 2.0-2.34 Professional Edition
* 2.0-2.34 Enterprise Edition

Solution
Apply hotfix ME-10023:
Further details available in Customer Area

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area