Lucene search
HistoryMar 25, 2008 - 7:44 p.m.
CVE-2008-1497
netwin
surgemail
imap
buffer overflow
cve-2008-1497
security vulnerability
7.7 High
AI Score
Confidence
Low
9 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.91 High
EPSS
Percentile
98.9%
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Affected configurations
Node
netwinsurgemailMatch1.8g3
ORnetwinsurgemailMatch1.9b2
ORnetwinsurgemailMatch2.0a2
ORnetwinsurgemailMatch2.0c
ORnetwinsurgemailMatch2.0e
ORnetwinsurgemailMatch2.0g2
ORnetwinsurgemailMatch2.1c7
ORnetwinsurgemailMatch2.2a6
ORnetwinsurgemailMatch2.2c10
ORnetwinsurgemailMatch2.2g2
ORnetwinsurgemailMatch2.2g3
ORnetwinsurgemailMatch3.0a
ORnetwinsurgemailMatch3.0c2
ORnetwinsurgemailMatch3.2e
ORnetwinsurgemailMatch3.5a
ORnetwinsurgemailMatch3.5b3
ORnetwinsurgemailMatch3.6d
ORnetwinsurgemailMatch3.6f3
ORnetwinsurgemailMatch3.6f5
ORnetwinsurgemailMatch3.6f7
ORnetwinsurgemailMatch3.7b
ORnetwinsurgemailMatch3.7b3
ORnetwinsurgemailMatch3.7b5
ORnetwinsurgemailMatch3.7b6
ORnetwinsurgemailMatch3.7b7
ORnetwinsurgemailMatch3.7b8
ORnetwinsurgemailMatch3.8a
ORnetwinsurgemailMatch3.8b
ORnetwinsurgemailMatch3.8d
ORnetwinsurgemailMatch3.8f
ORnetwinsurgemailMatch3.8f2
ORnetwinsurgemailMatch3.8f3
ORnetwinsurgemailMatch3.8i
ORnetwinsurgemailMatch3.8i2
ORnetwinsurgemailMatch3.8i3
ORnetwinsurgemailMatch3.8k
ORnetwinsurgemailMatch3.8k2
ORnetwinsurgemailMatch3.8k3
ORnetwinsurgemailMatch3.8m
References
Related
nvd
nvd
CVE-2008-1497
2008-03-25 19:44:00
CVE-2008-7182
2009-09-08 10:30:01
cvelist
cvelist
CVE-2008-1497
2008-03-25 19:00:00
CVE-2008-7182
2009-09-08 10:00:00
prion
prion
Stack overflow
2008-03-25 19:44:00
Buffer overflow
2009-09-08 10:30:00
cve
cve
CVE-2008-7182
2009-09-08 10:30:01
7.7 High
AI Score
Confidence
Low
9 High
CVSS2
Access Vector
Access Complexity
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:S/C:C/I:C/A:C
0.91 High
EPSS
Percentile
98.9%
Related for CVE-2008-1497