{"id":"CVE-2008-1276","aliases":["EUVD-2008-1284","GHSA-p8g8-6fmm-px7x"],"status":"published","title":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition...","description":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.","severity":{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.07092,"percentile":0.94273,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-119"],"published":"2008-03-10T23:00:00Z","modified":"2026-06-16T22:51:24Z","exploits":[{"source":"exploitdb","id":"EDB-5249","title":"MailEnable Professional/Enterprise 3.13 - 'Fetch' (Authenticated) Remote Buffer Overflow","type":"remote","platform":"windows","date":"2008-03-14","verified":true,"url":"https://www.exploit-db.com/exploits/5249"}],"products":[{"vendor":"mailenable","product":"mailenable_enterprise"},{"vendor":"mailenable","product":"mailenable_professional"}],"references":[{"url":"http://secunia.com/advisories/29277","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://aluigi.altervista.org/adv/maildisable-adv.txt","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://www.exploit-db.com/exploits/5249","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred"]},{"url":"http://www.vupen.com/english/advisories/2008/0799/references","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"]},{"url":"http://securityreason.com/securityalert/3724","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/489270/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securitytracker.com/id?1019565","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/28145","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/41058","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-1276"},{"url":"https://github.com/advisories/GHSA-p8g8-6fmm-px7x"}],"sources":{"cve":[{"id":"CVE-2008-1276","description":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.","status":"published","published":"2008-03-10T23:00:00Z","modified":"2024-08-07T08:17:33.548Z","updated_at":"2026-11-02T14:34:47.71012Z"}],"euvd":[{"id":"EUVD-2008-1284","description":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.","status":"published","published":"2008-03-10T23:00:00Z","modified":"2024-08-07T08:17:33Z","updated_at":"2026-11-03T01:39:02.668683Z"}],"ghsa":[{"id":"GHSA-p8g8-6fmm-px7x","title":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition...","description":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.","status":"published","published":"2022-05-01T23:38:20Z","modified":"2023-01-31T05:06:23Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:01.018652Z"}],"nvd":[{"id":"CVE-2008-1276","description":"Multiple buffer overflows in the IMAP service (MEIMAPS.EXE) in MailEnable Professional Edition and Enterprise Edition 3.13 and earlier allow remote authenticated attackers to execute arbitrary code via long arguments to the (1) FETCH, (2) EXAMINE, and (3) UNSUBSCRIBE commands.","status":"published","published":"2008-03-10T23:44:00Z","modified":"2026-06-16T22:51:24.26Z","cvss":[{"version":"2.0","score":9,"vector":"AV:N/AC:L/Au:S/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:25.857543Z"}]}}