CVE-2007-4377

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.

Affected products

Surgemail

Netwin Surgemail

= 38k

Fix

Available

CVSS 2.0

6.0 MEDIUM

EPSS

5.0% (91th percentile)

NVD status

Modified

Published

2007-08-16