• Halloween is coming! To celebrate the occasion, we dusted off a couple of old skins, and even created a brand new one (Pixel).
    To get into the festive spirit, install the Skins extension.
  • The new Python extension is now available. It allows customers to deploy and manage WSGI-based Python applications on their websites directly from Plesk.
  • The Plesk Mobile apps for iOS and Android and the Plesk Mobile Center extension have been deprecated, and are no longer available for new installations. In Plesk Obsidian 18.0.84, the Plesk Mobile Center extension will be removed from servers during the upgrade, and the Plesk Mobile apps will lose their server management features.
  • The Social Login extension has been deprecated and will be removed in Plesk Obsidian 18.0.84. After that, it will no longer be possible to log in to Plesk with a Google, Facebook, GitHub account, or with a passkey. Plesk usernames and passwords, as well as logging in with a WebPros Account, are not affected.

Mailenable SMTP Connector Vulnerable to DOS attack

S

spogany

Guest
Hello,
I have discovered that there is a DOS vulnerablility in Plesk's default installation of MailEnable ver 1.96 and it is NOT...I REPEAT NOT YET IN THE PLESK AUTO UPDATER!!!!!!

I am noticing my smtp connector mysteriously is stopping in the plesk services manager once in a while.

Why are the SWsoft not aware of this vulnerability when it has been known since 2006-06-26 ?

There is apparently a hotfix available from mailenable but I am personally scared to install it since it is not a hotfix that can be applied by Plesk's own Auto-updater tool.

The hotfix is available here: http://www.mailenable.com/hotfix/MESMTPC.ZIP

Can someone at SWsoft please explain?
 
You must log in or register to reply here.

Similar threads

T
Resolved Auto-update of vulnerable plugins ("security updates are autoinstalled") never applies: daily task only reschedules (WP Toolkit 6.11 / cPanel)
Replies
4
Views
5K
Sebahat.hadzhi
Sebahat.hadzhi
P
Issue False positives in Imunify notifications received hours after "outdated" software has already been auto-updated
Replies
0
Views
6K
pleskuser67553
P
presswizards
Resolved No changelog on Oct-Nov 2025 Imunify AI-bolit vulnerability? Imunify extension patched or not?
Replies
2
Views
5K
presswizards
presswizards
Bitpalast
Input "Copy Fail" vulnerability: Update your kernel! Do not trust other solutions!
Replies
7
Views
9K
whsplesk
W
T
Question How to Detect and Mitigate Next.js / React Vulnerabilities on Windows Plesk Server
Replies
0
Views
4K
teletek
T
Back
Top