CVE-2008-1055 Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and poss...
HighCVSS 7.5
EPSS 7.9%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | <= 38k4 | No fix listed |
| netwin surgemail | = 1.8a | No fix listed |
| netwin surgemail | = 1.8b3 | No fix listed |
| netwin surgemail | = 1.8d | No fix listed |
| netwin surgemail | = 1.8e | No fix listed |
| netwin surgemail | = 1.8g3 | No fix listed |
| netwin surgemail | = 1.9 | No fix listed |
| netwin surgemail | = 1.9b2 | No fix listed |
| netwin surgemail | = 2.0a2 | No fix listed |
| netwin surgemail | = 2.0c | No fix listed |
| netwin surgemail | = 2.0e | No fix listed |
| netwin surgemail | = 2.0g2 | No fix listed |
| netwin surgemail | = 2.1a | No fix listed |
| netwin surgemail | = 2.1c7 | No fix listed |
| netwin surgemail | = 2.2a6 | No fix listed |
| netwin surgemail | = 2.2c9 | No fix listed |
| netwin surgemail | = 2.2c10 | No fix listed |
| netwin surgemail | = 2.2g2 | No fix listed |
| netwin surgemail | = 2.2g3 | No fix listed |
| netwin surgemail | = 3.0a | No fix listed |
| netwin surgemail | = 3.0c2 | No fix listed |
| netwin surgemail | = 3.8f3 | No fix listed |
| netwin surgemail | = 39a | No fix listed |
| netwin surgemail | = beta_39a | No fix listed |
| netwin webmail | <= 3.1s | No fix listed |
References
- aluigi.altervista.org
- 29105 third-party-advisory vendor-advisory
- 29137 third-party-advisory
- 3705 third-party-advisory
- 20080225 Format string and buffer-overflow in SurgeMail 38k4 mailing-list
- 27990 exploit vdb-entry
- 1019500 vdb-entry
- ADV-2008-0678 vdb-entry
- surgemail-webmail-format-string(40833) vdb-entry