CVE-2010-2580
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
3Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 3.8%
The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/41175http://secunia.com/secunia_research/2010-112/http://www.mailenable.com/Enterprise-ReleaseNotes.txthttp://www.mailenable.com/hotfix/http://www.mailenable.com/Professional-ReleaseNotes.txthttp://www.mailenable.com/Standard-ReleaseNotes.txthttp://www.securityfocus.com/archive/1/513648/100/0/threadedhttp://www.securityfocus.com/bid/43182http://www.securitytracker.com/id?1024427