Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2019-11395

EPSS 12.53% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-11395

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Taps Lab MailCarrier 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Taps Lab MailCarrier是韩国Taps Lab公司的一款基于Windows Server平台的邮件服务器。该产品支持SMTP、POP3和IMAP等协议。 Taps Lab MailCarrier 2.51版本中存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2019-11395

#POC DescriptionSource LinkShenlong Link
1MailCarrier 2.51 - POP3 'USER' Buffer Overflowhttps://github.com/redalien301090/CVE-2019-11395POC Details
2MailCarrier 2.51 - POP3 'USER' Buffer Overflowhttps://github.com/RedAlien00/CVE-2019-11395POC Details
3A exploit for the CVE-2019-11395 vulnerability in the MailCarrier 2.51 email application, enabling remote code execution.https://github.com/caioprince/CVE-2019-11395POC Details
4Proof of concept with the academic purpose to understand the Buffer Overflow vulnerability using as background the CVE-2019-11395https://github.com/RafaelBicas/CVE-2019-11395POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-11395

请登录查看更多情报信息。

Same Patch Batch · n/a · 2019-04-21 · 26 CVEs total

CVE-2019-11235FreeRADIUS 数据伪造问题漏洞
CVE-2019-11387OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11388OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11389OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11390OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11391OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11393M/Monit 授权问题漏洞
CVE-2019-11401百容千域软件技术开发 SiteServer CMS 代码问题漏洞
CVE-2019-11402Gradle Enterprise 信任管理问题漏洞
CVE-2019-11403Gradle 信息泄露漏洞
CVE-2019-11404arrow-kt Arrow 安全特征问题漏洞
CVE-2019-11405OpenAPI Tools OpenAPI Generator 安全特征问题漏洞
CVE-2019-11234FreeRADIUS 授权问题漏洞
CVE-2019-11428I，Librarian 跨站脚本漏洞
CVE-2019-11411Artifex Software MuJS 缓冲区错误漏洞
CVE-2019-11412Artifex Software MuJS 缓冲区错误漏洞
CVE-2019-11413Artifex Software MuJS 资源管理错误漏洞
CVE-2019-11414Intelbras IWR 3000N 授权问题漏洞
CVE-2019-11415Intelbras IWR 3000N 输入验证错误漏洞
CVE-2019-11416Intelbras IWR 3000N 跨站请求伪造漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2019-11395

No comments yet

Leave a comment