漏洞信息详情

MailEnable SMTP服务 拒绝服务漏洞

• CNNVD编号：CNNVD-200803-152
• 危害等级： 中危
  
• CVE编号： CVE-2008-1275
• 漏洞类型： 设计错误
• 发布时间： 2008-03-10
• 威胁类型： 远程
• 更新时间： 2008-09-05
• 厂        商： mailenable
• 漏洞来源：

漏洞简介

MailEnable是一款商业性质的POP3和SMTP服务器。

MailEnable 的SMTP服务存在的多个未明漏洞。远程攻击者可以通过精心设计的(1)EXPN 或者(2)VRFY命令来造成一个拒绝服务(崩溃)。

漏洞公告

目前厂商已经发布了升级补丁以修复这个安全问题，补丁下载链接：

The vendor has released a fix to address this issue.

MailEnable MailEnable Enterprise Edition 2.35

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 3.13

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.83

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.1

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.0

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.2

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.40

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.72

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 2.32

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.82

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 3.13

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 2.2

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.35

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.30

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.41

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.42

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable 1.96

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 1.21

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 2.34

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.32

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.73

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 2.1

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 2.33

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.34

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 2.351

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable 1.91

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterprise Edition 0

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.84

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 010

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 016

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 011

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 006

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 012

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Professional 1.0 017

MailEnable ME-10039.EXE

http://www.mailenable.com/hotfix/ME-10039.EXE

MailEnable MailEnable Enterpris

参考网址

来源: BID

名称: 28154

链接:http://www.securityfocus.com/bid/28154

来源: www.mailenable.com

链接:http://www.mailenable.com/hotfix/

来源: SECUNIA

名称: 29300

; Patch Information

链接:http://secunia.com/advisories/29300

来源: VUPEN

名称: ADV-2008-0800

链接:http://www.frsirt.com/english/advisories/2008/0800/references

来源: XF

名称: mailenable-expn-vrfy-dos(41083)

链接:http://xforce.iss.net/xforce/xfdb/41083

来源: MILW0RM

名称: 5235

链接:http://www.milw0rm.com/exploits/5235

受影响实体

• Mailenable Mailenable_standard  
• Mailenable Mailenable_professional:3.0  
• Mailenable Mailenable_enterprise:3.0  

补丁

暂无