CyberSec.Space Logo
Back to CVE Browser

CVE-2008-1497

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.1530%
EPSS Percentile8.54th
PublishedMar 25, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.

Affected Platforms (CPE)

📦
Netwin

Surgemail

= 1.8g3
📦
Netwin

Surgemail

= 1.9b2
📦
Netwin

Surgemail

= 2.0a2
📦
Netwin

Surgemail

= 2.0c
📦
Netwin

Surgemail

= 2.0e
📦
Netwin

Surgemail

= 2.0g2
📦
Netwin

Surgemail

= 2.1c7
📦
Netwin

Surgemail

= 2.2a6
📦
Netwin

Surgemail

= 2.2c10
📦
Netwin

Surgemail

= 2.2g2
📦
Netwin

Surgemail

= 2.2g3
📦
Netwin

Surgemail

= 3.0a
📦
Netwin

Surgemail

= 3.0c2
📦
Netwin

Surgemail

= 3.2e
📦
Netwin

Surgemail

= 3.5a
📦
Netwin

Surgemail

= 3.5b3
📦
Netwin

Surgemail

= 3.6d
📦
Netwin

Surgemail

= 3.6f3
📦
Netwin

Surgemail

= 3.6f5
📦
Netwin

Surgemail

= 3.6f7
📦
Netwin

Surgemail

= 3.7b
📦
Netwin

Surgemail

= 3.7b3
📦
Netwin

Surgemail

= 3.7b5
📦
Netwin

Surgemail

= 3.7b6
📦
Netwin

Surgemail

= 3.7b7
📦
Netwin

Surgemail

= 3.7b8
📦
Netwin

Surgemail

= 3.8a
📦
Netwin

Surgemail

= 3.8b
📦
Netwin

Surgemail

= 3.8d
📦
Netwin

Surgemail

= 3.8f
📦
Netwin

Surgemail

= 3.8f2
📦
Netwin

Surgemail

= 3.8f3
📦
Netwin

Surgemail

= 3.8i
📦
Netwin

Surgemail

= 3.8i2
📦
Netwin

Surgemail

= 3.8i3
📦
Netwin

Surgemail

= 3.8k
📦
Netwin

Surgemail

= 3.8k2
📦
Netwin

Surgemail

= 3.8k3
📦
Netwin

Surgemail

= 3.8m

References & Advisories

🔗 http://secunia.com/advisories/29105
🔗 http://securityreason.com/securityalert/3774
🔗 http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07
🔗 http://www.netwinsite.com/surgemail/help/updates.htm
🔗 http://www.securityfocus.com/archive/1/489959/100/0/threaded
🔗 http://www.securityfocus.com/bid/28377
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41402
🔗 http://secunia.com/advisories/29105

Related Vulnerabilities

CVE-2007-437210.0

Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this...

CVE-2004-253710.0

Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."

CVE-2008-14989.0

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execu...

CVE-2007-26557.5

Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibl...