CVE-2008-1498

HIGH

Description

Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.

References

http://secunia.com/advisories/29105

http://www.netwinsite.com/surgemail/help/updates.htm

http://www.securityfocus.com/bid/28260

http://www.vupen.com/english/advisories/2008/0901/references

https://www.exploit-db.com/exploits/5259

Details

Source: MITRE

Published: 2008-03-25

Updated: 2017-09-29

Type: CWE-119

Risk Information

CVSS v2.0

Base Score: 9

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Impact Score: 10

Exploitability Score: 8

Severity: HIGH