Unrated severityNVD Advisory· Published Mar 25, 2008· Updated Apr 23, 2026
CVE-2008-1497
CVE-2008-1497
Description
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
Affected products
39cpe:2.3:a:netwin:surgemail:3.7b8:*:*:*:*:*:*:*+ 38 more
- cpe:2.3:a:netwin:surgemail:3.7b8:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.2e:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.5a:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.5b3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.6d:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.6f3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.6f5:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.6f7:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.7b:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.7b3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.7b5:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.7b6:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.7b7:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8a:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8b:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8d:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8f:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8f2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8k:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8k2:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8k3:*:*:*:*:*:*:*
- cpe:2.3:a:netwin:surgemail:3.8m:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
7- securityreason.com/securityalert/3774nvdExploit
- www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07nvdExploit
- www.securityfocus.com/bid/28377nvdExploit
- secunia.com/advisories/29105nvdVendor Advisory
- www.netwinsite.com/surgemail/help/updates.htmnvdVendor Advisory
- www.securityfocus.com/archive/1/489959/100/0/threadednvd
- exchange.xforce.ibmcloud.com/vulnerabilities/41402nvd
News mentions
0No linked articles in our index yet.