Published: 25/06/2008 Updated: 08/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Unspecified vulnerability in the IMAP service in NetWin SurgeMail prior to 3.9g2 allows remote malicious users to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."

Vulnerable Product	Search on Vulmon	Subscribe to Product
netwin surgemail 3.8f
netwin surgemail 3.8f2
netwin surgemail 3.8k3
netwin surgemail 3.8k4
netwin surgemail 3.9c
netwin surgemail 3.9e
netwin surgemail 3.8a
netwin surgemail 3.8i2
netwin surgemail 3.8i3
netwin surgemail 3.8q
netwin surgemail 3.8s
netwin surgemail 3.8f3
netwin surgemail 3.8i
netwin surgemail 3.8m
netwin surgemail 3.8o
netwin surgemail
netwin surgemail 3.8b
netwin surgemail 3.8d
netwin surgemail 3.8k
netwin surgemail 3.8k2
netwin surgemail 3.8u
netwin surgemail 3.9a

#!/usr/bin/python # # Surgemail version 39e-1 - (0day) Post Auth IMAP Buffer overflow DoS # Discovered by: Travis Warren # # The IMAP service contains a buffer overflow in the APPEND command # # import socket s = socketsocket(socketAF_INET, socketSOCK_STREAM) buffer = '\x41' * 3000 sconnect(('1921680103',143)) srecv(1024) ssend(' ...

NVD-CWE-noinfo http://www.netwinsite.com/surgemail/help/updates.htm http://www.securityfocus.com/bid/29805 http://secunia.com/advisories/30739 http://www.securitytracker.com/id?1020335 http://www.vupen.com/english/advisories/2008/1874/references https://exchange.xforce.ibmcloud.com/vulnerabilities/43171 https://nvd.nist.gov https://www.exploit-db.com/exploits/5968/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-2859

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect