CVEvulnerability

CVE-2007-4335

5.0 MEDIUM Published 2007-08-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-08-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

Format string vulnerability in the SMTP server component in Qbik WinGate 5.x and 6.x before 6.2.2 allows remote attackers to cause a denial of service (service crash) via format string specifiers in certain unexpected commands, which trigger a crash during error logging.

Affected configurations

• qbik wingate (<= 6.2.1) • qbik wingate 5.0 • qbik wingate 6.0

References