Lucene search

PRIOn knowledge basePRION:CVE-2010-2580

HistorySep 15, 2010 - 6:00 p.m.

Command injection

2010-09-1518:00:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an “unhandled invalid parameter error.”

CPENameOperatorVersion
mailenableeq4.17 pro
mailenableeq4.12 pro
mailenableeq4.0 pro
mailenableeq4.24 pro
mailenableeq4.1 pro
mailenableeq4.22 pro
mailenablele4.25
mailenableeq4.15 pro
mailenableeq4.13 pro
mailenableeq4.14 pro

Name	Operator	Version
mailenable	eq	4.17 pro
mailenable	eq	4.12 pro
mailenable	eq	4.0 pro
mailenable	eq	4.24 pro
mailenable	eq	4.1 pro
mailenable	eq	4.22 pro
mailenable	le	4.25
mailenable	eq	4.15 pro
mailenable	eq	4.13 pro
mailenable	eq	4.14 pro

Rows per page:

1-10 of 781

References

secunia.com/advisories/41175

secunia.com/secunia_research/2010-112/

www.mailenable.com/Enterprise-ReleaseNotes.txt

www.mailenable.com/hotfix/

www.mailenable.com/Professional-ReleaseNotes.txt

www.mailenable.com/Standard-ReleaseNotes.txt

www.securityfocus.com/archive/1/513648/100/0/threaded

www.securityfocus.com/bid/43182

www.securitytracker.com/id?1024427

7.1 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.017 Low

EPSS

Percentile

87.6%

JSON

Related for PRION:CVE-2010-2580