CVE-2010-2580

CVE-2010-2580 describes a denial-of-service vulnerability affecting the SMTP service (MESMTPC.exe) in MailEnable versions 3.x and 4.25. The flaw stems from insufficient length checking for email addresses in the MAIL FROM command or domain names in the RCPT TO command, leading to an "unhandled invalid parameter error" and a service crash. This vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable remotely with low attack complexity and no authentication required, resulting in a denial of service. There is no impact on confidentiality or integrity. Despite its age, there is no known active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.