Vulnerabilities > Netwin > Surgemail > Critical

DATE CVE VULNERABILITY TITLE RISK
2008-03-25 CVE-2008-1497 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Netwin Surgemail
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
network
low complexity
netwin CWE-119
critical
9.0
2008-03-25 CVE-2008-1498 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Netwin Surgemail
Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier allows remote authenticated users to execute arbitrary code via a long first argument to the LIST command.
network
low complexity
netwin CWE-119
critical
9.0
2007-08-16 CVE-2007-4372 Remote Security vulnerability in Netwin Surgemail 38K
Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown impact and remote attack vectors.
network
low complexity
microsoft netwin
critical
10.0
2004-12-31 CVE-2004-2537 Unspecified vulnerability in NetWin SurgeMail Webmail
Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack vectors, related to a "Webmail security bug."
network
low complexity
netwin
critical
10.0