PT-2009-2649 · Netwin · Surgemail

Travis Warren · Publicado 2009-09-08 · Atualizado 2017-09-29 · CVE-2008-7182

NVD

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:N/A:P

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498. NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859.

Exploit

Correção

DoS

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-7182

Produtos afetados

Surgemail

Referências · 6

• 🔥 https://exploit-db.com/exploits/5968 · Exploit
• 🔥 http://securityfocus.com/bid/30000 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7182 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7182 · Nota
• http://securityfocus.com/archive/1/496482 · Nota
• http://netwinsite.com/surgemail/help/updates.htm · Aviso do Fabricante