----------------------------------------------------------------------

Secunia is proud to announce the availability of the Secunia Software
Inspector.

The Secunia Software Inspector is a free service that detects insecure
versions of software that you may have installed in your system. When
insecure versions are detected, the Secunia Software Inspector also
provides thorough guidelines for updating the software to the latest
secure version from the vendor.

Try it out online:
http://secunia.com/software_inspector/

----------------------------------------------------------------------

TITLE:
MailEnable Web Mail Client Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA23998

VERIFY ADVISORY:
http://secunia.com/advisories/23998/

CRITICAL:
Moderately critical

IMPACT:
Cross Site Scripting

WHERE:
>From remote

SOFTWARE:
MailEnable Professional 2.x
http://secunia.com/product/10625/
MailEnable Professional 1.x
http://secunia.com/product/3474/
MailEnable Enterprise Edition 2.x
http://secunia.com/product/10427/
MailEnable Enterprise Edition 1.x
http://secunia.com/product/4325/

DESCRIPTION:
Secunia Research has discovered some vulnerabilities in MailEnable
Web Mail Client, which can be exploited by malicious people to
conduct cross-site request forgery attacks, cross-site scripting
attacks, and script insertion attacks.

1) Scripts in email messages are not properly sanitised before being
used to display the email message. This can be exploited to insert
arbitrary HTML and script code, which is executed in a user's browser
session in context of an affected site when a user views a specially
crafted email message.

2) Input passed to the "ID" parameter in
mewebmail/base/default/lang/EN/right.asp,
mewebmail/base/default/lang/EN/Forms/MAI/list.asp, and
mewebmail/base/default/lang/EN/Forms/VCF/list.asp is not properly
sanitised before being returned to the user. This can be exploited to
execute arbitrary HTML and script code in a user's browser session in
context of an affected site.

Successful exploitation requires that the target user is logged in.

3) The application allows users to send messages via HTTP requests
without performing any validity checks to verify the request. This
can be exploited to change a user's settings by e.g. tricking a
target user into visiting a malicious website.

The vulnerabilities are confirmed in version MailEnable Professional
2.351. Other versions may also be affected.

SOLUTION:
MailEnable Enterprise 2.x:
Update to version 2.37.

MailEnable Professional 2.x:
Update to version 2.37.

MailEnable Enterprise 1.x:
Update to version 1.42.

MailEnable Professional 1.x:
Update to version 1.85.

PROVIDED AND/OR DISCOVERED BY:
JJ Reyes, Secunia Research.

ORIGINAL ADVISORY:
Secunia Research:
http://secunia.com/secunia_research/2007-38

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------