CVE

Id
24312  
CVE No.
CVE-2007-0955  
Status
Candidate  
Description
The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.  
Phase
Assigned (20070214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
238650 24312 CVE-2007-0955 FULLDISC:20071214 MailEnable DoS POC  View
238651 24312 CVE-2007-0955 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2007-February/052427.html  View
238652 24312 CVE-2007-0955 FULLDISC:20070214 MailEnable DoS POC  View
238653 24312 CVE-2007-0955 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0321.html  View
238654 24312 CVE-2007-0955 FULLDISC:20070214 MailEnable DoS POC-2  View
238655 24312 CVE-2007-0955 URL:http://archives.neohapsis.com/archives/fulldisclosure/2007-02/0333.html  View
238656 24312 CVE-2007-0955 VUPEN:ADV-2007-0614  View
238657 24312 CVE-2007-0955 URL:http://www.vupen.com/english/advisories/2007/0614  View
238658 24312 CVE-2007-0955 OSVDB:33195  View
238659 24312 CVE-2007-0955 URL:http://osvdb.org/33195  View
238660 24312 CVE-2007-0955 SECUNIA:24139  View
238661 24312 CVE-2007-0955 URL:http://secunia.com/advisories/24139  View
238662 24312 CVE-2007-0955 SREASON:2249  View
238663 24312 CVE-2007-0955 URL:http://securityreason.com/securityalert/2249  View
238664 24312 CVE-2007-0955 XF:mailenable-ntlm-dos(32482)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51594 JVNDB-2007-000256 MIT Kerberos 5 krb5_klog_syslog() におけるスタックオーバーフローの脆弱性 MIT Kerberos 5 administration daemon の krb5_klog_syslog() の引数の取扱いに問題があるためスタックバッファオーバーフローの脆弱性が存在します。 CVE-2007-0957 24312 9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000256.html  View