CVE-2006-6423: Mailenable Enterprise

High severity, CVSS 10.0. EPSS: 70.7% chance of exploitation in the next 30 days.

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

Affected products

• Mailenable Mailenable Enterprise: version 1.1 only; version 1.2 only; version 1.11 only; version 1.12 only; version 1.13 only; version 1.14 only; …
• Mailenable Mailenable Professional: version 1.84 only

Published 2006-12-12. Last modified 2026-06-16.