libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read.

The version of libesmtp installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2019-19977 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:1235-1 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED12 / SLES12 / SLES_SAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2917-1 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SUSE15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE-SU-2021:2937-1 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:2937-1 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES11 host has a package installed that is affected by a vulnerability as referenced in the SUSE- SU-2021:14793-1 advisory.

  - libESMTP through 1.0.6 mishandles domain copying into a fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based buffer over-read. (CVE-2019-19977)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the version of the libesmtp package installed, the EulerOS installation on the remote host is affected by the following vulnerability :

  - libESMTP through 1.0.6 mishandles domain copying into a     fixed-size buffer in ntlm_build_type_2 in     ntlm/ntlmstruct.c, as demonstrated by a stack-based     buffer over-read.(CVE-2019-19977)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
201832	CBL Mariner 2.0 Security Update: libesmtp (CVE-2019-19977)	Nessus	MarinerOS Local Security Checks	critical
153113	openSUSE 15 Security Update : libesmtp (openSUSE-SU-2021:1235-1)	Nessus	SuSE Local Security Checks	critical
153012	SUSE SLED12 / SLES12 Security Update : libesmtp (SUSE-SU-2021:2917-1)	Nessus	SuSE Local Security Checks	critical
153004	openSUSE 15 Security Update : libesmtp (openSUSE-SU-2021:2937-1)	Nessus	SuSE Local Security Checks	critical
152996	SUSE SLED15 / SLES15 Security Update : libesmtp (SUSE-SU-2021:2937-1)	Nessus	SuSE Local Security Checks	critical
152834	SUSE SLES11 Security Update : libesmtp (SUSE-SU-2021:14793-1)	Nessus	SuSE Local Security Checks	critical
137469	EulerOS 2.0 SP2 : libesmtp (EulerOS-SA-2020-1627)	Nessus	Huawei Local Security Checks	critical
135528	EulerOS 2.0 SP3 : libesmtp (EulerOS-SA-2020-1399)	Nessus	Huawei Local Security Checks	critical
133994	EulerOS 2.0 SP8 : libesmtp (EulerOS-SA-2020-1160)	Nessus	Huawei Local Security Checks	critical
133914	EulerOS 2.0 SP5 : libesmtp (EulerOS-SA-2020-1113)	Nessus	Huawei Local Security Checks	critical

Detections

Analytics

CVE-2019-19977

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical