CVE-2006-6290

Severity: medium (CVSS 6.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-12-05 · updated 2026-06-16

Description

Multiple stack-based buffer overflows in the IMAP module (MEIMAPS.EXE) in MailEnable Professional 1.6 through 1.82 and 2.0 through 2.33, and MailEnable Enterprise 1.1 through 1.30 and 2.0 through 2.33 allow remote authenticated users to cause a denial of service (crash) or possibly execute arbitrary code via a long argument to the (1) EXAMINE or (2) SELECT command.

Affected products

Mailenable Enterprise: 1.1, 1.2, 1.11, 1.12, 1.13, 1.14 (+48)
Mailenable Professional: 1.6, 1.82, 2.0, 2.33

References

http://secunia.com/advisories/23047
http://secunia.com/advisories/23080
http://secunia.com/secunia_research/2006-71/advisory/
http://securitytracker.com/id?1017276
http://securitytracker.com/id?1017319
http://www.mailenable.com/hotfix/
http://www.securityfocus.com/archive/1/453118/100/100/threaded
http://www.securityfocus.com/bid/21362
http://www.vupen.com/english/advisories/2006/4673
http://www.vupen.com/english/advisories/2006/4778
https://exchange.xforce.ibmcloud.com/vulnerabilities/30614
http://secunia.com/advisories/23047

Get alerted when CVE-2006-6290 or the next vulnerability affects your stack