CVE-2007-4377

EPSS 5.0%

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/4287unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=full-disclosure&m=118710179924684&w=2 http://secunia.com/advisories/26464 https://exchange.xforce.ibmcloud.com/vulnerabilities/36009 https://www.exploit-db.com/exploits/4287 http://www.securityfocus.com/bid/25318 http://www.vupen.com/english/advisories/2007/2875