CVE-2008-3606

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

Link	Resource
http://www.securityfocus.com/bid/30606	Exploit
http://www.securitytracker.com/id?1020644
http://secunia.com/advisories/31442	Vendor Advisory
http://securityreason.com/securityalert/4146
https://exchange.xforce.ibmcloud.com/vulnerabilities/44370
http://www.securityfocus.com/archive/1/495264/100/0/threaded

Configuration 1

cpe:2.3:a:qbik:wingate:4.4.0:beta_a:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.4.1025:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.1.1.1077:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:3.0.5:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.2:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:*:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.4.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.0.984:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.2.2:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.0.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.2.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.1.2.1094:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.2.1000:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.0.5:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.1.3.1096:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:2.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.2.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.2.1001:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.1:beta_a:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.1.993:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.3.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.1.995:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.1.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.2.3:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.5.0:beta_b:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.3.0:beta_b:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.3.0:beta_a:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.0.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.4.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:2.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.1.4:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.5.2:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.5.0:beta_a:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.2.2.1137:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.1.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.4.2:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.0:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.0.1.766:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:6.0.3.1005:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:5.0.1:*:*:*:*:*:*:* cpe:2.3:a:qbik:wingate:4.5.1:*:*:*:*:*:*:*

---

Published : 2008-08-12 07:41

Updated : 2018-10-11 08:48

---

NVD link : CVE-2008-3606

Mitre link : CVE-2008-3606

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer