CyberSec.Space Logo
Back to CVE Browser

CVE-2008-1498

CRITICAL
9.0
CVSS Severity Score
EPSS Score0.0810%
EPSS Percentile21.68th
PublishedMar 25, 2008
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.

Affected Platforms (CPE)

📦
Netwin

Surgemail

<= 3.8k4

References & Advisories

🔗 http://secunia.com/advisories/29105
🔗 http://www.netwinsite.com/surgemail/help/updates.htm
🔗 http://www.securityfocus.com/bid/28260
🔗 http://www.vupen.com/english/advisories/2008/0901/references
🔗 https://www.exploit-db.com/exploits/5259
🔗 http://secunia.com/advisories/29105
🔗 http://www.netwinsite.com/surgemail/help/updates.htm
🔗 http://www.securityfocus.com/bid/28260

Related Vulnerabilities

CVE-2007-437210.0

Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors. NOTE: this...

CVE-2004-253710.0

Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."

CVE-2008-14979.0

Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execut...

CVE-2007-26557.5

Unspecified vulnerability in NetWin Webmail 3.1s-1 in SurgeMail before 3.8i2 has unknown impact and remote attack vectors, possibl...