CVE-2009-3445
UnknownEPSS 2.15%
Last modified
CVE-2009-3445 is a vulnerability of currently unknown severity. Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.. EPSS estimates a 2.15% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Code-Crafters | Ability Mail Server | <= 2.63 |
| Code-Crafters | Ability Mail Server | 1.18 |
| Code-Crafters | Ability Mail Server | 2.01b |
| Code-Crafters | Ability Mail Server | 2.02b |
| Code-Crafters | Ability Mail Server | 2.03b |
| Code-Crafters | Ability Mail Server | 2.04b |
| Code-Crafters | Ability Mail Server | 2.05b |
| Code-Crafters | Ability Mail Server | 2.10 |
| Code-Crafters | Ability Mail Server | 2.11 |
| Code-Crafters | Ability Mail Server | 2.12 |
| Code-Crafters | Ability Mail Server | 2.13 |
| Code-Crafters | Ability Mail Server | 2.14 |
| Code-Crafters | Ability Mail Server | 2.15 |
| Code-Crafters | Ability Mail Server | 2.16 |
| Code-Crafters | Ability Mail Server | 2.17 |
| Code-Crafters | Ability Mail Server | 2.18 |
| Code-Crafters | Ability Mail Server | 2.19 |
| Code-Crafters | Ability Mail Server | 2.20 |
| Code-Crafters | Ability Mail Server | 2.21 |
| Code-Crafters | Ability Mail Server | 2.22 |
| Code-Crafters | Ability Mail Server | 2.23 |
| Code-Crafters | Ability Mail Server | 2.50 |
| Code-Crafters | Ability Mail Server | 2.51 |
| Code-Crafters | Ability Mail Server | 2.52 |
| Code-Crafters | Ability Mail Server | 2.53 |
| Code-Crafters | Ability Mail Server | 2.54 |
| Code-Crafters | Ability Mail Server | 2.55 |
| Code-Crafters | Ability Mail Server | 2.56 |
| Code-Crafters | Ability Mail Server | 2.57 |
| Code-Crafters | Ability Mail Server | 2.58 |
| Code-Crafters | Ability Mail Server | 2.60 |
| Code-Crafters | Ability Mail Server | 2.61 |
| Code-Crafters | Ability Mail Server | 2.62 |
References
- http://secunia.com/advisories/36888Vendor Advisory
- http://secunia.com/advisories/36888Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2009-3445?
Unspecified vulnerability in Code-Crafters Ability Mail Server before 2.70 allows remote attackers to cause a denial of service (daemon crash) via an IMAP4 FETCH command.
How severe is CVE-2009-3445?
Severity scoring for CVE-2009-3445 is pending analysis. The EPSS model estimates a 2.15% probability of exploitation in the next 30 days.
How do I fix CVE-2009-3445?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2009
- CVE-2009-3439Multiple SQL injection vulnerabilities in Open Source Securi…
- CVE-2009-3440Cross-site scripting (XSS) vulnerability in Open Source Secu…
- CVE-2009-3441Open Source Security Information Management (OSSIM) before 2…
- CVE-2009-3442The Meta tags (aka Nodewords) module before 6.x-1.1 for Drup…
- CVE-2009-3443SQL injection vulnerability in the Fastball (com_fastball) c…
- CVE-2009-3444Cross-site scripting (XSS) vulnerability in email.php in e10…
- CVE-2009-3446SQL injection vulnerability in the MyRemote Video Gallery (c…
- CVE-2009-3447Unrestricted file upload vulnerability in RADactive I-Load b…
- CVE-2009-3448npvmgr.exe in BakBone NetVault Backup 8.22 Build 29 allows r…
- CVE-2009-3449MP3 Collector 2.3 allows remote attackers to cause a denial …
- CVE-2009-3450Multiple cross-site scripting (XSS) vulnerabilities in WebCo…
- CVE-2009-3451Directory traversal vulnerability in WebCoreModule.ashx in R…
Are you affected by CVE-2009-3445?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
