CVE-2010-2580

Published Sep 15, 2010 CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed
Description
The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-2584 The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Aug 7, 2024, 2:39 AM
Reserved
Jul 1, 2010, 12:00 AM
Status
Modified
Published
Sep 15, 2010, 6:00 PM
Modified
Jun 16, 2026, 11:21 PM