CVE-2010-2580

no score yetEPSS 3.8%

mailenable mailenable: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.

The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2010-09-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

mailenable:mailenable

References

http://secunia.com/advisories/41175
http://secunia.com/secunia_research/2010-112/
http://www.mailenable.com/Enterprise-ReleaseNotes.txt
http://www.mailenable.com/Professional-ReleaseNotes.txt
http://www.mailenable.com/Standard-ReleaseNotes.txt

Check your stack JSON