The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."
References
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Configuration 5 (hide)
|
Configuration 6 (hide)
|
Information
Published : 2010-09-15 11:00
Updated : 2018-10-10 12:59
NVD link : CVE-2010-2580
Mitre link : CVE-2010-2580
JSON object : View
CWE
CWE-20
Improper Input Validation
Products Affected
mailenable
- mailenable