CVE-2006-6423

no score yetEPSS 71%

Stack-based buffer overflow in the IMAP service for MailEnable Professional and Enterprise Edition 2.0 through 2.35, Professional Edition 1.6 through 1.84, and Enterprise Edition 1.1 through 1.41 allows remote attackers to execute arbitrary code via a pre-authentication command followed by a crafted parameter and a long string, as addressed by the ME-10025 hotfix.

EPSS: 71% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
Published: 2006-12-12
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mailenable:mailenable_enterprise
mailenable:mailenable_professional

References

http://secunia.com/advisories/23201
http://secunia.com/secunia_research/2006-73/advisory/
http://securityreason.com/securityalert/2022
http://www.mailenable.com/hotfix/
http://www.securityfocus.com/archive/1/454075/100/0/threaded

Check your stack JSON