A vulnerability has been reported in MailMax, which can be exploited by a malicious person to conduct a Denial of Service and possibly execute arbitrary code on a vulnerable system.

The vulnerability is caused due to a boundary error in the included IMAPMax module. A malicious person can exploit this by supplying a long, specially crafted argument to the "SELECT" command after authentication, which can result in execution of arbitrary code with SYSTEM privileges.

Version 5.0.10.8 has been reported vulnerable.

Solution
Version 5.5 is not vulnerable:
Further details available to Secunia VIM customers

Provided and/or discovered by
Matrix at 0x36.org

Deep Links
Links available to Secunia VIM customers