Vulnerability Details CVE-2007-0955
The NTLM_UnPack_Type3 function in MENTLM.dll in MailEnable Professional 2.35 and earlier allows remote attackers to cause a denial of service (application crash) via certain base64-encoded data following an AUTHENTICATE NTLM command to the imap port (143/tcp), which results in an out-of-bounds read.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.126
EPSS Ranking 93.6%
CVSS Severity
CVSS v2 Score 7.8
Products affected by CVE-2007-0955
-
cpe:2.3:a:mailenable:mailenable:1.6
-
cpe:2.3:a:mailenable:mailenable:1.61
-
cpe:2.3:a:mailenable:mailenable:1.62
-
cpe:2.3:a:mailenable:mailenable:1.63
-
cpe:2.3:a:mailenable:mailenable:1.64
-
cpe:2.3:a:mailenable:mailenable:1.65
-
cpe:2.3:a:mailenable:mailenable:1.66
-
cpe:2.3:a:mailenable:mailenable:1.67
-
cpe:2.3:a:mailenable:mailenable:1.68
-
cpe:2.3:a:mailenable:mailenable:1.69
-
cpe:2.3:a:mailenable:mailenable:1.81
-
cpe:2.3:a:mailenable:mailenable:1.82
-
cpe:2.3:a:mailenable:mailenable:1.83
-
cpe:2.3:a:mailenable:mailenable:1.84
-
cpe:2.3:a:mailenable:mailenable:1.85
-
cpe:2.3:a:mailenable:mailenable:1.86
-
cpe:2.3:a:mailenable:mailenable:1.87
-
cpe:2.3:a:mailenable:mailenable:2.0
-
cpe:2.3:a:mailenable:mailenable:2.01
-
cpe:2.3:a:mailenable:mailenable:2.02
-
cpe:2.3:a:mailenable:mailenable:2.03
-
cpe:2.3:a:mailenable:mailenable:2.04
-
cpe:2.3:a:mailenable:mailenable:2.05
-
cpe:2.3:a:mailenable:mailenable:2.06
-
cpe:2.3:a:mailenable:mailenable:2.07
-
cpe:2.3:a:mailenable:mailenable:2.08
-
cpe:2.3:a:mailenable:mailenable:2.09
-
cpe:2.3:a:mailenable:mailenable:2.09.2
-
cpe:2.3:a:mailenable:mailenable:2.09.3
-
cpe:2.3:a:mailenable:mailenable:2.09.4
-
cpe:2.3:a:mailenable:mailenable:2.1.1
-
cpe:2.3:a:mailenable:mailenable:2.1.2
-
cpe:2.3:a:mailenable:mailenable:2.1.3
-
cpe:2.3:a:mailenable:mailenable:2.31
-
cpe:2.3:a:mailenable:mailenable:2.32
-
cpe:2.3:a:mailenable:mailenable:2.33
-
cpe:2.3:a:mailenable:mailenable:2.34
-
cpe:2.3:a:mailenable:mailenable:2.35