CVE-2007-0955

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

5.33%

Published

Feb 15, 2007

Modified

Jun 16, 2026

Public PoC / Exploit (3)

All weaponized →

Exploit-DBMailEnable Professional/Enterprise 2.35 - Out of Bounds Denial of Service Exploit-DBMailEnable Professional/Enterprise 2.37 - Denial of Service TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.

Affected Products (1)

mailenable · mailenablevulnerable

References (16)

http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0321.html

Third Party Advisory

http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0333.html

Third Party Advisory

http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052427.html

Third Party Advisory

http://osvdb.org/33195

Broken Link

http://secunia.com/advisories/24139