Stack-Based Buffer Overflow in SurgeMail IMAP Service by SurgeMail Inc.
CVE-2007-4377

Currently unrated

Key Information:

Vendor

Netwin

Status
Surgemail
Vendor
CVE Published:
16 August 2007

What is CVE-2007-4377?

A stack-based buffer overflow exists in the IMAP service of SurgeMail 38k, enabling remote authenticated users to execute arbitrary code by sending overly long arguments to the SEARCH command. This vulnerability could potentially compromise the security of affected systems, allowing unauthorized actions by malicious actors.

References

http://marc.info/?l=full-disclosure&m=118710179924684&w=2
mailing-listx_refsource_FULLDISC
http://www.vupen.com/english/advisories/2007/2875
vdb-entryx_refsource_VUPEN
https://www.exploit-db.com/exploits/4287
exploitx_refsource_EXPLOIT-DB

EPSS Score

9% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.