NVD

Id
14036  
Name
CVE-2010-2580  
Description
The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-18  
Published
2010-09-15  
Modified Date
2010-09-16  
Seq
2010-2580  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
77742 14036 CVE-2010-2580 http://www.mailenable.com/Enterprise-ReleaseNotes.txt  View
77743 14036 CVE-2010-2580 http://www.mailenable.com/hotfix/  View
77744 14036 CVE-2010-2580 http://www.mailenable.com/Professional-ReleaseNotes.txt  View
77745 14036 CVE-2010-2580 http://www.mailenable.com/Standard-ReleaseNotes.txt  View
77746 14036 CVE-2010-2580 20100913 Secunia Research: MailEnable SMTP Service Two Denial of Service Vulnerabilities  View
77747 14036 CVE-2010-2580 43182  View
77748 14036 CVE-2010-2580 1024427  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37176 JVNDB-2010-002961 MailEnable の SMTP サービス (MESMTPC.exe) におけるサービス運用妨害 (DoS) の脆弱性 MailEnable の SMTP サービス (MESMTPC.exe) は、長さのチェックを適切に実行しないため、サービス運用妨害 (クラッシュ) 状態となる脆弱性が存在します。 CVE-2010-2580 45160 CVE-2010-2580 14036 5 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002961.html 2010-09-13 2012-03-27 View