CVE-2008-1497

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.

Link	Resource
http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07	Exploit
http://www.netwinsite.com/surgemail/help/updates.htm	Vendor Advisory
http://www.securityfocus.com/bid/28377	Exploit
http://secunia.com/advisories/29105	Vendor Advisory
http://securityreason.com/securityalert/3774	Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/41402
http://www.securityfocus.com/archive/1/489959/100/0/threaded

Configuration 1

cpe:2.3:a:netwin:surgemail:3.6f7:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8d:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8b:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b8:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8a:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.5b3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8k3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b6:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8f2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8m:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8f:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.2e:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.6d:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b7:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.6f5:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.7b5:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8k:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.8k2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.5a:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:* cpe:2.3:a:netwin:surgemail:3.6f3:*:*:*:*:*:*:*

---

Published : 2008-03-25 07:44

Updated : 2018-10-11 08:35

---

NVD link : CVE-2008-1497

Mitre link : CVE-2008-1497

Netwin

Surgemail

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer