Lucene search

[email protected]CVE-2008-3606

HistoryAug 12, 2008 - 7:41 p.m.

CVE-2008-3606

2008-08-1219:41:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-3606

heap-based

buffer overflow

imap

qbik wingate

denial of service

remote code execution

nvd

8.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.075 Low

EPSS

Percentile

94.1%

JSON

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

CPENameOperatorVersion
qbik:wingateqbik wingateeq4.4.0
qbik:wingateqbik wingateeq6.0.4.1025
qbik:wingateqbik wingateeq5.1
qbik:wingateqbik wingateeq6.1.1.1077
qbik:wingateqbik wingateeq3.0.5
qbik:wingateqbik wingateeq5.2
qbik:wingateqbik wingatele6.2.2
qbik:wingateqbik wingateeq4.4.1
qbik:wingateqbik wingateeq6.0.0.984
qbik:wingateqbik wingateeq5.2.2

CPE	Name	Operator	Version
qbik:wingate	qbik wingate	eq	4.4.0
qbik:wingate	qbik wingate	eq	6.0.4.1025
qbik:wingate	qbik wingate	eq	5.1
qbik:wingate	qbik wingate	eq	6.1.1.1077
qbik:wingate	qbik wingate	eq	3.0.5
qbik:wingate	qbik wingate	eq	5.2
qbik:wingate	qbik wingate	le	6.2.2
qbik:wingate	qbik wingate	eq	4.4.1
qbik:wingate	qbik wingate	eq	6.0.0.984
qbik:wingate	qbik wingate	eq	5.2.2

Rows per page:

1-10 of 401

References

secunia.com/advisories/31442

securityreason.com/securityalert/4146

www.securityfocus.com/archive/1/495264/100/0/threaded

www.securityfocus.com/bid/30606

www.securitytracker.com/id?1020644

exchange.xforce.ibmcloud.com/vulnerabilities/44370

8.2 High

AI Score

Confidence

High

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.075 Low

EPSS

Percentile

94.1%

JSON

Related for CVE-2008-3606

openvas2 prion1