CVE-2004-2501

Buffer overflow in the IMAP service of MailEnable Professional Edition 1.52 and Enterprise Edition 1.01 allows remote attackers to execute arbitrary code via (1) a long command string or (2) a long string to the MEIMAP service and then terminating the connection.

• http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.htmlExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/13318Patch, Vendor Advisory
• http://securitytracker.com/id?1012327Exploit, Patch, Vendor Advisory
• http://www.hat-squad.com/en/000102.htmlExploit, Patch, Vendor Advisory
• http://www.osvdb.org/12135
• http://www.osvdb.org/12136
• http://www.securityfocus.com/bid/11755Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18285
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18286
• http://archives.neohapsis.com/archives/bugtraq/2004-11/0349.htmlExploit, Patch, Vendor Advisory
• http://secunia.com/advisories/13318Patch, Vendor Advisory
• http://securitytracker.com/id?1012327Exploit, Patch, Vendor Advisory
• http://www.hat-squad.com/en/000102.htmlExploit, Patch, Vendor Advisory
• http://www.osvdb.org/12135
• http://www.osvdb.org/12136
• http://www.securityfocus.com/bid/11755Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18285
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18286

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2495The (1) Webmail, (2) admin, and (3) SMTP services in Ability…
• CVE-2004-2496The HTTP daemon in OpenText FirstClass 7.1 and 8.0 allows re…
• CVE-2004-2497Cross-site scripting (XSS) vulnerability in the error handle…
• CVE-2004-2498Unspecified vulnerability in the error handler in Hitachi We…
• CVE-2004-2499Unspecified vulnerability in Hitachi Web Page Generator and …
• CVE-2004-2500Unknown vulnerability in IlohaMail before 0.8.14-rc1 has unk…
• CVE-2004-2502im-switch before 11.4-46.1 in Fedora Core 2 allows local use…
• CVE-2004-2503INweb Mail Server 2.40 allows remote attackers to cause a de…
• CVE-2004-2504The GUI in Alt-N Technologies MDaemon 7.2 and earlier, inclu…
• CVE-2004-2505Macromedia ColdFusion MX before 6.1 does not restrict the si…
• CVE-2004-2506Unparsed web content delivery vulnerability in WIKINDX befor…
• CVE-2004-2507Absolute path traversal vulnerability in main.cgi in Linksys…