CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1054

Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.225

EPSS Ranking 95.6%

CVSS Severity

CVSS v2 Score 6.4

References

Products affected by CVE-2008-1054

Netwin » Surgemail » Version: 1.8a

cpe:2.3:a:netwin:surgemail:1.8a
Netwin » Surgemail » Version: 1.8b3

cpe:2.3:a:netwin:surgemail:1.8b3
Netwin » Surgemail » Version: 1.8d

cpe:2.3:a:netwin:surgemail:1.8d
Netwin » Surgemail » Version: 1.8e

cpe:2.3:a:netwin:surgemail:1.8e
Netwin » Surgemail » Version: 1.8g3

cpe:2.3:a:netwin:surgemail:1.8g3
Netwin » Surgemail » Version: 1.9

cpe:2.3:a:netwin:surgemail:1.9
Netwin » Surgemail » Version: 1.9b2

cpe:2.3:a:netwin:surgemail:1.9b2
Netwin » Surgemail » Version: 2.0a2

cpe:2.3:a:netwin:surgemail:2.0a2
Netwin » Surgemail » Version: 2.0c

cpe:2.3:a:netwin:surgemail:2.0c
Netwin » Surgemail » Version: 2.0e

cpe:2.3:a:netwin:surgemail:2.0e
Netwin » Surgemail » Version: 2.0g2

cpe:2.3:a:netwin:surgemail:2.0g2
Netwin » Surgemail » Version: 2.1a

cpe:2.3:a:netwin:surgemail:2.1a
Netwin » Surgemail » Version: 2.1c7

cpe:2.3:a:netwin:surgemail:2.1c7
Netwin » Surgemail » Version: 2.2a6

cpe:2.3:a:netwin:surgemail:2.2a6
Netwin » Surgemail » Version: 2.2c10

cpe:2.3:a:netwin:surgemail:2.2c10
Netwin » Surgemail » Version: 2.2c9

cpe:2.3:a:netwin:surgemail:2.2c9
Netwin » Surgemail » Version: 2.2g2

cpe:2.3:a:netwin:surgemail:2.2g2
Netwin » Surgemail » Version: 2.2g3

cpe:2.3:a:netwin:surgemail:2.2g3
Netwin » Surgemail » Version: 3.0a

cpe:2.3:a:netwin:surgemail:3.0a
Netwin » Surgemail » Version: 3.0c2

cpe:2.3:a:netwin:surgemail:3.0c2
Netwin » Surgemail » Version: 3.1s

cpe:2.3:a:netwin:surgemail:3.1s
Netwin » Surgemail » Version: 3.8f3

cpe:2.3:a:netwin:surgemail:3.8f3
Netwin » Surgemail » Version: 3.8i

cpe:2.3:a:netwin:surgemail:3.8i
Netwin » Surgemail » Version: 3.8i2

cpe:2.3:a:netwin:surgemail:3.8i2
Netwin » Surgemail » Version: 3.8i3

cpe:2.3:a:netwin:surgemail:3.8i3
Netwin » Surgemail » Version: 38k

cpe:2.3:a:netwin:surgemail:38k
Netwin » Surgemail » Version: 38k4

cpe:2.3:a:netwin:surgemail:38k4

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-1054

Products

Pricing

Contact Us