| Package | Affected versions | Patched versions |
|---|---|---|
| mailenable enterprise | ≤ 1.00≤ 1.01≤ 1.02≤ 1.03≤ 1.04≤ 1.1≤ 1.2≤ 1.21 | |
| mailenable professional | = 1.0.004= 1.0.005= 1.0.006= 1.0.007= 1.0.008= 1.0.009= 1.0.010= 1.0.011= 1.0.012= 1.0.013= 1.0.014= 1.0.015= 1.0.016= 1.0.017= 1.1= 1.101= 1.102= 1.103= 1.104= 1.105= 1.106= 1.107= 1.108= 1.109= 1.110= 1.111= 1.112= 1.113= 1.114= 1.115= 1.116= 1.12= 1.13= 1.14= 1.15= 1.16= 1.17= 1.18= 1.19= 1.2= 1.2a= 1.5= 1.5015= 1.5016= 1.5017= 1.5018= 1.51= 1.52= 1.53= 1.54= 1.6= 1.610= 1.7= 1.701= 1.702= 1.703= 1.704= 1.71= 1.72= 1.73= 1.8= 1.9= 1.91= 1.92= 1.93 |
The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free