Stack-based Buffer Overflow in SurgeMail Webmail Feature
CVE-2007-6457

Currently unrated

Key Information:

Vendor

Netwin

Status
Surgemail
Vendor
CVE Published:
20 December 2007

What is CVE-2007-6457?

SurgeMail versions prior to 38k4 are susceptible to a stack-based buffer overflow in the webmail functionality. This vulnerability enables remote attackers to send a specially crafted request containing an excessively long Host header, which can result in a service crash, disrupting operations and potentially exposing system vulnerabilities. Organizations using affected versions should consider implementing immediate mitigations or upgrading to secure versions to safeguard against possible exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

http://secunia.com/advisories/28142
third-party-advisoryx_refsource_SECUNIA
https://exchange.xforce.ibmcloud.com/vulnerabilities/39087
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2007/4245
vdb-entryx_refsource_VUPEN

EPSS Score

6% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.