PT-2009-2649 · Netwin · Surgemail

Travis Warren · Published 2009-09-08 · Updated 2017-09-29 · CVE-2008-7182

NVD

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:P

Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498. NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859.

Exploit

Fix

DoS

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-7182

Affected Products

Surgemail

References · 6

• 🔥 https://exploit-db.com/exploits/5968 · Exploit
• 🔥 http://securityfocus.com/bid/30000 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-7182 · Security Note
• http://netwinsite.com/surgemail/help/updates.htm · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-7182 · Note
• http://securityfocus.com/archive/1/496482 · Note