Saturday, September 27, 2008

MailEnable Weaknesses

First and foremost, I would like to say that the MailEnable suite has been an insecure project from the start. Like heroin addicts at daybreak, these coders simply sold their code to the highest bidder, for the highest shot. Not really (?), but that is quite a situation to imagine. But really, looking at its track record, its no wonder that a little drive by fuzzing took down its IMAP server. Hit it with a few nonchalant logins then some characters that it can't properly parse to take this IMAP server down. Tested with MailEnable Enterprise V3 on WIN2K3.

0 comments: