Alert! Critial attack on systems with Mail Enable (versions prior to 2.37) installed



I had Mail Enable Enterprise 2.33 installed on my fully patched Windows Server 2003 (SP1). On Feb 24, there was a massive attack against ME installed servers and systems which installed rootkits and relayed all password hashes to an outside address. This is reported and documented on the Mail Enable forums and they had issued a KB on how to fix the problem. The service in question is call Mail Enable SMTP Relay Services.

Read from forum.mailenable.com look at the Enterprise forum.

.