Read the docs
TI-2006-03176 Aliases CVE-2006-3277GHSA-r589-x22v-575x

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier…

Priority LOW 32CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

The SMTP service of MailEnable Standard 1.92 and earlier, Professional 2.0 and earlier, and Enterprise 2.0 and earlier before the MESMTPC hotfix, allows remote attackers to cause a denial of service (application crash) via a HELO command with a null byte in the argument, possibly triggering a length inconsistency or a missing argument.

Why it matters now

EPSS 0.06107 93rd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 66

CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:*up to 1.00; up to 1.01; up to 1.1; up to 1.2; up to 1.02; up to 1.03; up to 1.04; up to 1.21VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.004:*:*:*:*:*:*:*1.0.004VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.005:*:*:*:*:*:*:*1.0.005VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.006:*:*:*:*:*:*:*1.0.006VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.007:*:*:*:*:*:*:*1.0.007VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.008:*:*:*:*:*:*:*1.0.008VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.009:*:*:*:*:*:*:*1.0.009VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.010:*:*:*:*:*:*:*1.0.010VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.011:*:*:*:*:*:*:*1.0.011VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.012:*:*:*:*:*:*:*1.0.012VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable_enterprise:*:*:*:*:*:*:*:* Versions up to 1.00; up to 1.01; up to 1.1; up to 1.2; up to 1.02; up to 1.03; up to 1.04; up to 1.21 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.004:*:*:*:*:*:*:* Versions 1.0.004 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.005:*:*:*:*:*:*:* Versions 1.0.005 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.006:*:*:*:*:*:*:* Versions 1.0.006 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.007:*:*:*:*:*:*:* Versions 1.0.007 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.008:*:*:*:*:*:*:* Versions 1.0.008 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.009:*:*:*:*:*:*:* Versions 1.0.009 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.010:*:*:*:*:*:*:* Versions 1.0.010 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.011:*:*:*:*:*:*:* Versions 1.0.011 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.012:*:*:*:*:*:*:* Versions 1.0.012 Vulnerable ·MailEnable
Show 56 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:mailenable:mailenable_professional:1.0.013:*:*:*:*:*:*:*1.0.013VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.014:*:*:*:*:*:*:*1.0.014VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.015:*:*:*:*:*:*:*1.0.015VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.016:*:*:*:*:*:*:*1.0.016VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.0.017:*:*:*:*:*:*:*1.0.017VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.1:*:*:*:*:*:*:*1.1VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:*1.2VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:*1.2aVulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:*1.5VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:*1.6VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:*1.7VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.8:*:*:*:*:*:*:*1.8VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.9:*:*:*:*:*:*:*1.9VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.12:*:*:*:*:*:*:*1.12VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.13:*:*:*:*:*:*:*1.13VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.14:*:*:*:*:*:*:*1.14VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.15:*:*:*:*:*:*:*1.15VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.16:*:*:*:*:*:*:*1.16VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:*1.17VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:*1.18VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:*1.19VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:*1.51VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:*1.52VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:*1.53VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:*1.54VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:*1.71VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:*1.72VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:*1.73VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.91:*:*:*:*:*:*:*1.91VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.92:*:*:*:*:*:*:*1.92VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.93:*:*:*:*:*:*:*1.93VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.101:*:*:*:*:*:*:*1.101VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.102:*:*:*:*:*:*:*1.102VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.103:*:*:*:*:*:*:*1.103VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.104:*:*:*:*:*:*:*1.104VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.105:*:*:*:*:*:*:*1.105VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.106:*:*:*:*:*:*:*1.106VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.107:*:*:*:*:*:*:*1.107VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.108:*:*:*:*:*:*:*1.108VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.109:*:*:*:*:*:*:*1.109VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.110:*:*:*:*:*:*:*1.110VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.111:*:*:*:*:*:*:*1.111VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.112:*:*:*:*:*:*:*1.112VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.113:*:*:*:*:*:*:*1.113VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.114:*:*:*:*:*:*:*1.114VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.115:*:*:*:*:*:*:*1.115VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.116:*:*:*:*:*:*:*1.116VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.610:*:*:*:*:*:*:*1.610VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.701:*:*:*:*:*:*:*1.701VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.702:*:*:*:*:*:*:*1.702VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.703:*:*:*:*:*:*:*1.703VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.704:*:*:*:*:*:*:*1.704VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5015:*:*:*:*:*:*:*1.5015VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5016:*:*:*:*:*:*:*1.5016VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5017:*:*:*:*:*:*:*1.5017VulnerableMailEnable
cpe:2.3:a:mailenable:mailenable_professional:1.5018:*:*:*:*:*:*:*1.5018VulnerableMailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.013:*:*:*:*:*:*:* Versions 1.0.013 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.014:*:*:*:*:*:*:* Versions 1.0.014 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.015:*:*:*:*:*:*:* Versions 1.0.015 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.016:*:*:*:*:*:*:* Versions 1.0.016 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.0.017:*:*:*:*:*:*:* Versions 1.0.017 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.2a:*:*:*:*:*:*:* Versions 1.2a Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.6:*:*:*:*:*:*:* Versions 1.6 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.7:*:*:*:*:*:*:* Versions 1.7 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.8:*:*:*:*:*:*:* Versions 1.8 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.12:*:*:*:*:*:*:* Versions 1.12 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.13:*:*:*:*:*:*:* Versions 1.13 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.14:*:*:*:*:*:*:* Versions 1.14 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.15:*:*:*:*:*:*:* Versions 1.15 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.16:*:*:*:*:*:*:* Versions 1.16 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.17:*:*:*:*:*:*:* Versions 1.17 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.18:*:*:*:*:*:*:* Versions 1.18 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.19:*:*:*:*:*:*:* Versions 1.19 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.51:*:*:*:*:*:*:* Versions 1.51 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.52:*:*:*:*:*:*:* Versions 1.52 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.53:*:*:*:*:*:*:* Versions 1.53 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.54:*:*:*:*:*:*:* Versions 1.54 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.71:*:*:*:*:*:*:* Versions 1.71 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.72:*:*:*:*:*:*:* Versions 1.72 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.73:*:*:*:*:*:*:* Versions 1.73 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.91:*:*:*:*:*:*:* Versions 1.91 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.92:*:*:*:*:*:*:* Versions 1.92 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.93:*:*:*:*:*:*:* Versions 1.93 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.101:*:*:*:*:*:*:* Versions 1.101 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.102:*:*:*:*:*:*:* Versions 1.102 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.103:*:*:*:*:*:*:* Versions 1.103 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.104:*:*:*:*:*:*:* Versions 1.104 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.105:*:*:*:*:*:*:* Versions 1.105 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.106:*:*:*:*:*:*:* Versions 1.106 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.107:*:*:*:*:*:*:* Versions 1.107 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.108:*:*:*:*:*:*:* Versions 1.108 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.109:*:*:*:*:*:*:* Versions 1.109 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.110:*:*:*:*:*:*:* Versions 1.110 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.111:*:*:*:*:*:*:* Versions 1.111 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.112:*:*:*:*:*:*:* Versions 1.112 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.113:*:*:*:*:*:*:* Versions 1.113 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.114:*:*:*:*:*:*:* Versions 1.114 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.115:*:*:*:*:*:*:* Versions 1.115 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.116:*:*:*:*:*:*:* Versions 1.116 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.610:*:*:*:*:*:*:* Versions 1.610 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.701:*:*:*:*:*:*:* Versions 1.701 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.702:*:*:*:*:*:*:* Versions 1.702 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.703:*:*:*:*:*:*:* Versions 1.703 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.704:*:*:*:*:*:*:* Versions 1.704 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5015:*:*:*:*:*:*:* Versions 1.5015 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5016:*:*:*:*:*:*:* Versions 1.5016 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5017:*:*:*:*:*:*:* Versions 1.5017 Vulnerable ·MailEnable
  • cpe:2.3:a:mailenable:mailenable_professional:1.5018:*:*:*:*:*:*:* Versions 1.5018 Vulnerable ·MailEnable

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2006-3277
  2. 2026-10-03 Alias added: GHSA-r589-x22v-575x

References

Patch 2

Advisory 1

Other 2

  • TI-2006-06170 Stack-based buffer overflow in the IMAP service for MailEnable Professional and… CVSS 2.0HIGH 10.0
  • TI-2005-01273 Buffer overflow in HTTPMail in MailEnable Enterprise 1.04 and earlier and Professional… CVSS 2.0HIGH 7.5
  • TI-2005-02983 Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6… CVSS 2.0HIGH 7.5
  • TI-2007-01259 Stack-based buffer overflow in the IMAP service in MailEnable Enterprise and Professional… CVSS 2.0HIGH 9.0
  • TI-2006-06349 Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier… CVSS 2.0HIGH 10.0
  • TI-2008-01227 The IMAP service (MEIMAPS.exe) in MailEnable Professional Edition and Enterprise Edition… CVSS 2.0HIGH 9.0
See all 28 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences