Unrated severityNVD Advisory· Published Mar 10, 2008· Updated Apr 23, 2026
CVE-2008-1277
CVE-2008-1277
Description
The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allows remote attackers to cause a denial of service (crash) via (1) SEARCH and (2) APPEND commands without required arguments, which triggers a NULL pointer dereference.
Affected products
2- cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*Range: <=3.13
- cpe:2.3:a:mailenable:mailenable_professional:*:*:*:*:*:*:*:*Range: <=3.13
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.securityfocus.com/bid/28145nvdExploit
- secunia.com/advisories/29277nvdVendor Advisory
- aluigi.altervista.org/adv/maildisable-adv.txtnvd
- securityreason.com/securityalert/3724nvd
- www.securityfocus.com/archive/1/489270/100/0/threadednvd
- www.securitytracker.com/idnvd
- www.vupen.com/english/advisories/2008/0799/referencesnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41059nvd
News mentions
0No linked articles in our index yet.