CVE-2007-2655 Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
HighCVSS 7.5
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibly a format string vulnerability that allows remote code execution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | = 3.8f3 | No fix listed |
| netwin surgemail | = 3.8i | No fix listed |
| netwin surgemail | = 3.8i2 | No fix listed |
| netwin webmail | = 3.1s1 | No fix listed |
| netwin webmail | = 3.1s13 | No fix listed |
References
- 35891 vdb-entry
- 25207 patch third-party-advisory vendor-advisory
- www.netwinsite.com patch
- 23908 patch vdb-entry
- ADV-2007-1755 vdb-entry vendor-advisory
- surgemail-unspecified-security-bypass(34217) vdb-entry