CVE-2005-3813 json
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of ser…
published 2005-11-26 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3808
- cvss
- 4.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 3.6%
- EPSS 3.6% chance of exploitation in 30 days, percentile 89%
- public exploits
- 1
- Exploit-DB
Summary
IMAP service (meimaps.exe) of MailEnable Professional 1.7 and Enterprise 1.1 allows remote authenticated attackers to cause a denial of service (application crash) by using RENAME with a non-existent mailbox, a different vulnerability than CVE-2005-3690.
Patch / fix
Timeline
- First public exploit (EDB-26575)
- Published
Exploit prediction
3.56% chance of exploitation in the next 30 days, higher than 89% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-26575 MailEnable 1.1/1.7 - IMAP Rename Request Remote Denial of Service dos, 2005-11-23
- securityfocus.com http://www.securityfocus.com/bid/15556 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 4.0 | AV:N/AC:L/Au:S/C:N/I:N/A:P |
References
-
securityfocus.com
/bid/15556
vdb-entry, exploit, patch
-
zur.homelinux.com
/Advisories/MailEnableImapDos.txt
patch, vendor-advisory
-
secunia.com
/advisories/17740
third-party-advisory, vendor-advisory
-
securityreason.com
/securityalert/205
third-party-advisory
-
marc.info
/?l=full-disclosure&m=113285451031500&w=2
mailing-list
-
securityfocus.com
/archive/1/417589/30/0/threaded
mailing-list
-
securitytracker.com
/id?1015268
vdb-entry
-
osvdb.org
/21109
vdb-entry
-
vupen.com
/english/advisories/2005/2579
vdb-entry
Sources
- CVE List CVE-2005-3813
- NVD CVE-2005-3813
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.