CVE-2006-1337

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-21 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the POP 3 (POP3) service in MailEnable Standard Edition before 1.93, Professional Edition before 1.73, and Enterprise Edition before 1.21 allows remote attackers to execute arbitrary code via unknown vectors before authentication.

Affected products

MailEnable: through 1.72; through 1.2; through 1.92; 1.2, 1.2a, 1.5, 1.6, 1.7, 1.17 (+22)

References

http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html
http://secunia.com/advisories/19288
http://securitytracker.com/id?1015797
http://www.mailenable.com/enterprisehistory.asp
http://www.mailenable.com/professionalhistory.asp
http://www.mailenable.com/standardhistory.asp
http://www.osvdb.org/24012
http://www.securityfocus.com/bid/17162
http://www.vupen.com/english/advisories/2006/1006
https://exchange.xforce.ibmcloud.com/vulnerabilities/25314
http://archives.neohapsis.com/archives/fulldisclosure/2006-03/1359.html
http://secunia.com/advisories/19288

Get alerted when CVE-2006-1337 or the next vulnerability affects your stack