CVE-2006-3277: Mailenable Enterprise

Medium severity, CVSS 5.0. EPSS: 6.1% chance of exploitation in the next 30 days.

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

Affected products

• Mailenable Mailenable Enterprise: up to and including 1.00; up to and including 1.01; up to and including 1.1; up to and including 1.2; up to and including 1.02; up to and including 1.03; …
• Mailenable Mailenable Professional: version 1.0.004 only; version 1.0.005 only; version 1.0.006 only; version 1.0.007 only; version 1.0.008 only; version 1.0.009 only; …

Published 2006-06-28. Last modified 2026-06-16.