CVE-2019-11682

CVE-2019-11682 is a buffer overflow in the SMTP response service of MailCarrier 2.51, enabling remote arbitrary code execution via long input strings (e.g., via SMTP HELO/RCPT TO and related commands as demonstrated for CVE-2019-11395). Multiple connected sources (Red Hat, CVE trackers, and relat...

CVE-2019-11395

CVE-2019-11395 is a buffer overflow in MailCarrier 2.51 that allows remote code execution via a long string, demonstrated through SMTP RCPT TO and several POP3 commands. The connected Red Hat entries corroborate the same issue (CVE-2019-11395) and note a remote code execution vector; they do not ...

CVE-2019-25364

MailCarrier 2.51 vulnerability: a buffer overflow in the POP3 USER command enables remote code execution via a crafted oversized buffer. Affects MailCarrier 2.51; impact stated as high confidentiality, integrity, and availability risks (CVSS v3.1/4.0 values shown). The document does not list a co...

CVE-2019-25646

Tabs Mail Carrier 2.5.1 contains a buffer overflow in the MAIL FROM SMTP command that allows remote code execution by sending a crafted MAIL FROM parameter. An attacker can connect to the SMTP service on port 25 and send an oversized MAIL FROM to overwrite the EIP and execute a bind shell payload...