Description
Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier allows remote authenticated users to execute arbitrary code via long arguments to the LSUB command.
References
- 3774 third-party-advisory
- http://www.infigo.hr/en/in_focus/advisories/INFIGO-2008-03-07
- 29105 third-party-advisory
- 20080321 [INFIGO-2008-03-07]: Surgemail 38k4 IMAP server remote stack overflow mailing-list
- 28377 vdb-entry
- surgemail-imap-lsub-bo(41402) vdb-entry
- http://www.netwinsite.com/surgemail/help/updates.htm