CVE-2007-4377 Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-200...
MediumCVSS 6.0
EPSS 5.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | = 38k | No fix listed |
References
- 20070814 Stop WabiSabiLabi Hacker Oppression NOW mailing-list
- 26464 third-party-advisory vendor-advisory
- 25318 vdb-entry
- ADV-2007-2875 vdb-entry
- surgemail-imap-code-execution(36009) vdb-entry
- 4287 exploit