CVE-2008-1497
25.03.2008, 19:44
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.Enginsight
| Vendor | Product | Version |
|---|---|---|
| netwin | surgemail | 1.8g3:g3 |
| netwin | surgemail | 1.9b2:b2 |
| netwin | surgemail | 2.0a2:a2 |
| netwin | surgemail | 2.0c:c |
| netwin | surgemail | 2.0e:e |
| netwin | surgemail | 2.0g2:g2 |
| netwin | surgemail | 2.1c7:c7 |
| netwin | surgemail | 2.2a6:a6 |
| netwin | surgemail | 2.2c10:c10 |
| netwin | surgemail | 2.2g2:g2 |
| netwin | surgemail | 2.2g3:g3 |
| netwin | surgemail | 3.0a:a |
| netwin | surgemail | 3.0c2:c2 |
| netwin | surgemail | 3.2e:e |
| netwin | surgemail | 3.5a:a |
| netwin | surgemail | 3.5b3:b3 |
| netwin | surgemail | 3.6d:d |
| netwin | surgemail | 3.6f3:f3 |
| netwin | surgemail | 3.6f5:f5 |
| netwin | surgemail | 3.6f7:f7 |
| netwin | surgemail | 3.7b:b |
| netwin | surgemail | 3.7b3:b3 |
| netwin | surgemail | 3.7b5:b5 |
| netwin | surgemail | 3.7b6:b6 |
| netwin | surgemail | 3.7b7:b7 |
| netwin | surgemail | 3.7b8:b8 |
| netwin | surgemail | 3.8a:a |
| netwin | surgemail | 3.8b:b |
| netwin | surgemail | 3.8d:d |
| netwin | surgemail | 3.8f:f |
| netwin | surgemail | 3.8f2:f2 |
| netwin | surgemail | 3.8f3:f3 |
| netwin | surgemail | 3.8i:i |
| netwin | surgemail | 3.8i2:i2 |
| netwin | surgemail | 3.8i3:i3 |
| netwin | surgemail | 3.8k:k |
| netwin | surgemail | 3.8k2:k2 |
| netwin | surgemail | 3.8k3:k3 |
| netwin | surgemail | 3.8m:m |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References