CVEvulnerability

CVE-2008-1497

9.0 HIGH Published 2008-03-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-03-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.

Affected configurations

• netwin surgemail 1.8g3 • netwin surgemail 1.9b2 • netwin surgemail 2.0a2 • netwin surgemail 2.0c • netwin surgemail 2.0e • netwin surgemail 2.0g2 • netwin surgemail 2.1c7 • netwin surgemail 2.2a6 • netwin surgemail 2.2c10 • netwin surgemail 2.2g2 • netwin surgemail 2.2g3 • netwin surgemail 3.0a • netwin surgemail 3.0c2 • netwin surgemail 3.2e • netwin surgemail 3.5a • netwin surgemail 3.5b3 • netwin surgemail 3.6d • netwin surgemail 3.6f3 • netwin surgemail 3.6f5 • netwin surgemail 3.6f7 • netwin surgemail 3.7b • netwin surgemail 3.7b3 • netwin surgemail 3.7b5 • netwin surgemail 3.7b6 • netwin surgemail 3.7b7 • netwin surgemail 3.7b8 • netwin surgemail 3.8a • netwin surgemail 3.8b • netwin surgemail 3.8d • netwin surgemail 3.8f • netwin surgemail 3.8f2 • netwin surgemail 3.8f3 • netwin surgemail 3.8i • netwin surgemail 3.8i2 • netwin surgemail 3.8i3 • netwin surgemail 3.8k • netwin surgemail 3.8k2 • netwin surgemail 3.8k3 • netwin surgemail 3.8m

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References