CVE-2019-11395

Опубликовано: 22 апр. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Средний

Описание

A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR.

Ссылки

http://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152502/MailCarrier-2.51-RCPT-TO-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152504/MailCarrier-2.51-USER-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152505/MailCarrier-2.51-LIST-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152506/MailCarrier-2.51-TOP-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry
https://packetstormsecurity.com/files/152530/MailCarrier-2.51-RETR-Buffer-Overflow.html
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:tabslab:mailcarrier:2.51:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13918

Средний

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

GHSA-7v86-hv29-pw56