Vulnerability Details : CVE-2011-4040
Public exploit exists!
Buffer overflow in MiniSmtp 3.0.11818 in NJStar Communicator allows remote attackers to execute arbitrary code via a crafted packet.
Vulnerability category: OverflowExecute code
Exploit prediction scoring system (EPSS) score for CVE-2011-4040
Probability of exploitation activity in the next 30 days: 70.17%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 98 % EPSS Score History EPSS FAQ
Metasploit modules for CVE-2011-4040
-
NJStar Communicator 3.00 MiniSMTP Buffer Overflow
Disclosure Date: 2011-10-31First seen: 2020-04-26exploit/windows/smtp/njstar_smtp_bofThis module exploits a stack buffer overflow vulnerability in NJStar Communicator Version 3.00 MiniSMTP server. The MiniSMTP application can be seen in multiple NJStar products, and will continue to run in the background even if the software is already shutdown. Ac
CVSS scores for CVE-2011-4040
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
10.0
|
HIGH | AV:N/AC:L/Au:N/C:C/I:C/A:C |
10.0
|
10.0
|
NIST |
CWE ids for CVE-2011-4040
-
The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer.Assigned by: nvd@nist.gov (Primary)
References for CVE-2011-4040
-
http://www.kb.cert.org/vuls/id/819630
VU#819630 - NJStar Communicator MiniSmtp packet processing buffer overflow vulnerabilityUS Government Resource
Products affected by CVE-2011-4040
- cpe:2.3:a:njstar:njstar_communicator:3.0.11818:*:*:*:*:*:*:*