Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2019-11395

Quick assessment

Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Taps Lab MailCarrier是韩国Taps Lab公司的一款基于Windows Server平台的邮件服务器。该产品支持SMTP、POP3和IMAP等协议。 Taps Lab MailCarrier 2.51版本中存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。

AI Predicted 10.0 Difficulty: Trivial EPSS 14.57% · P97

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2019-11395

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A buffer overflow in MailCarrier 2.51 allows remote attackers to execute arbitrary code via a long string, as demonstrated by SMTP RCPT TO, POP3 USER, POP3 LIST, POP3 TOP, or POP3 RETR.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Taps Lab MailCarrier 缓冲区错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Taps Lab MailCarrier是韩国Taps Lab公司的一款基于Windows Server平台的邮件服务器。该产品支持SMTP、POP3和IMAP等协议。 Taps Lab MailCarrier 2.51版本中存在缓冲区溢出漏洞。该漏洞源于网络系统或产品在内存上执行操作时，未正确验证数据边界，导致向关联的其他内存位置上执行了错误的读写操作。攻击者可利用该漏洞导致缓冲区溢出或堆溢出等。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2019-11395

# POC Description Source Link Shenlong Link
1 MailCarrier 2.51 - POP3 'USER' Buffer Overflow https://github.com/redalien301090/CVE-2019-11395 POC Details
2 MailCarrier 2.51 - POP3 'USER' Buffer Overflow https://github.com/RedAlien00/CVE-2019-11395 POC Details
3 A exploit for the CVE-2019-11395 vulnerability in the MailCarrier 2.51 email application, enabling remote code execution. https://github.com/caioprince/CVE-2019-11395 POC Details
4 Proof of concept with the academic purpose to understand the Buffer Overflow vulnerability using as background the CVE-2019-11395 https://github.com/RafaelBicas/CVE-2019-11395 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-11395

请登录查看更多情报信息。

Exploits & Public PoCs for CVE-2019-11395 (10)

Same Patch Batch · n/a · 2019-04-21 · 26 CVEs total

CVE-2019-11235 FreeRADIUS 数据伪造问题漏洞
CVE-2019-11387 OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11388 OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11389 OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11390 OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11391 OWASP ModSecurity Core Rule Set 资源管理错误漏洞
CVE-2019-11393 M/Monit 授权问题漏洞
CVE-2019-11401 百容千域软件技术开发 SiteServer CMS 代码问题漏洞
CVE-2019-11402 Gradle Enterprise 信任管理问题漏洞
CVE-2019-11403 Gradle 信息泄露漏洞
CVE-2019-11404 arrow-kt Arrow 安全特征问题漏洞
CVE-2019-11405 OpenAPI Tools OpenAPI Generator 安全特征问题漏洞
CVE-2019-11234 FreeRADIUS 授权问题漏洞
CVE-2019-11428 I，Librarian 跨站脚本漏洞
CVE-2019-11411 Artifex Software MuJS 缓冲区错误漏洞
CVE-2019-11412 Artifex Software MuJS 缓冲区错误漏洞
CVE-2019-11413 Artifex Software MuJS 资源管理错误漏洞
CVE-2019-11414 Intelbras IWR 3000N 授权问题漏洞
CVE-2019-11415 Intelbras IWR 3000N 输入验证错误漏洞
CVE-2019-11416 Intelbras IWR 3000N 跨站请求伪造漏洞

Showing top 20 of 26 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2019-11395

No comments yet

Leave a comment