CVE-2010-2580: Mailenable

Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days.

The SMTP service (MESMTPC.exe) in MailEnable 3.x and 4.25 does not properly perform a length check, which allows remote attackers to cause a denial of service (crash) via a long (1) email address in the MAIL FROM command, or (2) domain name in the RCPT TO command, which triggers an "unhandled invalid parameter error."

Affected products

• Mailenable Mailenable: up to and including 4.25; version 4.0 only; version 4.1 only; version 4.01 only; version 4.11 only; version 4.12 only; …

Published 2010-09-15. Last modified 2026-06-16.