CVE-2006-5176

Published: Oct 10, 2006Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Buffer overflow in NTLM authentication in MailEnable Professional 2.0 and Enterprise 2.0 allows remote attackers to execute arbitrary code via "the signature field of NTLM Type 1 messages".

Affected (2)

Products: Mailenable: Mailenable Enterprise, Mailenable Professional

Mailenable

2 products

Mailenable Enterprise

Mailenable Professional

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Mailenable Mailenable Enterprise	Version 2.0
Mailenable Mailenable Professional	Version 2.0

Related CWEs

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (12)

http://labs.musecurity.com/advisories/MU-200609-01.txt

Source: cve@mitre.org

Patch

http://secunia.com/advisories/22179

Source: cve@mitre.org

PatchVendor Advisory

http://www.mailenable.com/hotfix/

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/20290

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/3862

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29284

Source: cve@mitre.org

http://labs.musecurity.com/advisories/MU-200609-01.txt