CVE-2008-7182 Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbi...
MediumCVSS 4.0
EPSS 24.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions before 3.9g2, allows remote authenticated users to cause a denial of service (crash) and possibly execute arbitrary code via a long first argument to the APPEND command, a different vector than CVE-2008-1497 and CVE-2008-1498. NOTE: due to lack of details, it is not certain whether this is the same issue as CVE-2008-2859.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwin surgemail | = 3.9e | No fix listed |
References
- www.netwinsite.com vendor-advisory
- 20080917 [AJECT] SurgeMail IMAP 3.9e vulnerability mailing-list
- 30000 exploit vdb-entry
- 5968 exploit