CVE-2006-1337 Memory corruption in n/a
Remote attackers can execute arbitrary code on MailEnable mail servers via a buffer overflow in the POP3 service without authentication.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-1337?
CVE-2006-1337 is a high-severity memory corruption vulnerability in Mailenable Mailenable, published on 21 Mar 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.
Weakness: CWE-119
Which versions are affected by CVE-2006-1337?
It affects 1 product.
Products include Mailenable Mailenable.
How do I fix CVE-2006-1337?
No fix has been published for CVE-2006-1337 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2006-1337 being exploited?
There is no known exploitation of CVE-2006-1337 in the wild and no public exploit code.
Other vulnerabilities in Mailenable Mailenable
- CVE-2015-9280 XML external entity in n/a
- CVE-2025-44148 Cross-site scripting in n/a
- CVE-2019-12924 XML external entity in n/a
- CVE-2015-9278 MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB a
- CVE-2015-9277 Path traversal in n/a
Sources
Also known as GHSA-f264-f84x-7vmq.