5

CVE-2010-2580

The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mailenable ≫ Mailenable Update - Edition pro Version <= 4.25
Mailenable ≫ Mailenable Version 4.0 Update - Edition pro
Mailenable ≫ Mailenable Version 4.1 Update - Edition pro
Mailenable ≫ Mailenable Version 4.01 Update - Edition pro
Mailenable ≫ Mailenable Version 4.11 Update - Edition pro
Mailenable ≫ Mailenable Version 4.12 Update - Edition pro
Mailenable ≫ Mailenable Version 4.13 Update - Edition pro
Mailenable ≫ Mailenable Version 4.14 Update - Edition pro
Mailenable ≫ Mailenable Version 4.15 Update - Edition pro
Mailenable ≫ Mailenable Version 4.16 Update - Edition pro
Mailenable ≫ Mailenable Version 4.17 Update - Edition pro
Mailenable ≫ Mailenable Version 4.22 Update - Edition pro
Mailenable ≫ Mailenable Version 4.23 Update - Edition pro
Mailenable ≫ Mailenable Version 4.24 Update - Edition pro
Mailenable ≫ Mailenable Update - Edition std Version <= 4.25
Mailenable ≫ Mailenable Version 4.0 Update - Edition std
Mailenable ≫ Mailenable Version 4.01 Update - Edition std
Mailenable ≫ Mailenable Version 4.1 Update - Edition std
Mailenable ≫ Mailenable Version 4.13 Update - Edition std
Mailenable ≫ Mailenable Version 4.14 Update - Edition std
Mailenable ≫ Mailenable Version 4.16 Update - Edition std
Mailenable ≫ Mailenable Version 4.17 Update - Edition std
Mailenable ≫ Mailenable Version 4.22 Update - Edition std
Mailenable ≫ Mailenable Version 4.23 Update - Edition std
Mailenable ≫ Mailenable Version 4.24 Update - Edition std
Mailenable ≫ Mailenable Update - Edition enterprise Version <= 4.25
Mailenable ≫ Mailenable Version 4.0 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.01 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.1 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.11 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.12 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.13 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.14 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.15 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.16 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.17 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.22 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.23 Update - Edition enterprise
Mailenable ≫ Mailenable Version 4.24 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.61 Update - Edition std
Mailenable ≫ Mailenable Version 3.62 Update - Edition std
Mailenable ≫ Mailenable Version 3.63 Update - Edition std
Mailenable ≫ Mailenable Version 3.0 Update - Edition pro
Mailenable ≫ Mailenable Version 3.01 Update - Edition pro
Mailenable ≫ Mailenable Version 3.02 Update - Edition pro
Mailenable ≫ Mailenable Version 3.03 Update - Edition pro
Mailenable ≫ Mailenable Version 3.04 Update - Edition pro
Mailenable ≫ Mailenable Version 3.5 Update - Edition pro
Mailenable ≫ Mailenable Version 3.6 Update - Edition pro
Mailenable ≫ Mailenable Version 3.10 Update - Edition pro
Mailenable ≫ Mailenable Version 3.11 Update - Edition pro
Mailenable ≫ Mailenable Version 3.12 Update - Edition pro
Mailenable ≫ Mailenable Version 3.13 Update - Edition pro
Mailenable ≫ Mailenable Version 3.14 Update - Edition pro
Mailenable ≫ Mailenable Version 3.51 Update - Edition pro
Mailenable ≫ Mailenable Version 3.52 Update - Edition pro
Mailenable ≫ Mailenable Version 3.53 Update - Edition pro
Mailenable ≫ Mailenable Version 3.61 Update - Edition pro
Mailenable ≫ Mailenable Version 3.62 Update - Edition pro
Mailenable ≫ Mailenable Version 3.63 Update - Edition pro
Mailenable ≫ Mailenable Version 3.0 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.01 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.02 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.03 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.04 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.5 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.6 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.10 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.11 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.12 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.13 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.14 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.51 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.52 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.53 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.61 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.62 Update - Edition enterprise
Mailenable ≫ Mailenable Version 3.63 Update - Edition enterprise
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 3.84% 0.887
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.mailenable.com/hotfix/
Patch
Vendor Advisory
http://secunia.com/advisories/41175
Vendor Advisory
http://secunia.com/secunia_research/2010-112/
Vendor Advisory
http://www.mailenable.com/Enterprise-ReleaseNotes.txt
http://www.mailenable.com/Professional-ReleaseNotes.txt
http://www.mailenable.com/Standard-ReleaseNotes.txt
http://www.securityfocus.com/archive/1/513648/100/0/threaded
http://www.securityfocus.com/bid/43182
http://www.securitytracker.com/id?1024427