PRIOn knowledge basePRION:CVE-2008-1055

HistoryFeb 27, 2008 - 7:44 p.m.

Format string

2008-02-2719:44:00

PRIOn knowledge base

www.prio-n.com

8.3 High

AI Score

Confidence

High

0.933 High

EPSS

Percentile

99.1%

JSON

Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.

CPENameOperatorVersion
surgemaileq3.0.0-c2
surgemaileq2.2.0-a6
surgemaileq1.8.101
surgemaileq39.0.97
surgemaileq2.0.0-g2
surgemaileq2.0.101
surgemaileq2.1.97
surgemaileqbeta-39a
surgemaileq2.0.99
surgemaileq2.2.0-g2

Name	Operator	Version
surgemail	eq	3.0.0-c2
surgemail	eq	2.2.0-a6
surgemail	eq	1.8.101
surgemail	eq	39.0.97
surgemail	eq	2.0.0-g2
surgemail	eq	2.0.101
surgemail	eq	2.1.97
surgemail	eq	beta-39a
surgemail	eq	2.0.99
surgemail	eq	2.2.0-g2

Rows per page:

1-10 of 251

References

aluigi.altervista.org/adv/surgemailz-adv.txt

secunia.com/advisories/29105

secunia.com/advisories/29137

securityreason.com/securityalert/3705

www.securityfocus.com/archive/1/488741/100/0/threaded

www.securityfocus.com/bid/27990

www.securitytracker.com/id?1019500

www.vupen.com/english/advisories/2008/0678

exchange.xforce.ibmcloud.com/vulnerabilities/40833