CVE-2007-4377: Buffer Overflow
Published Aug 16, 2007
·Updated
Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.
Affected Software
1 affected component
Netwin Surgemail=38k
Event History
Aug 16, 2007
CVE Published
06:17 PM
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4377?
CVE-2007-4377 is classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-4377?
To mitigate CVE-2007-4377, update to a patched version of SurgeMail that addresses the buffer overflow issue.
3
Who is affected by CVE-2007-4377?
CVE-2007-4377 affects users of SurgeMail version 38k that enable the IMAP service.
4
Can CVE-2007-4377 be exploited by unauthenticated users?
No, CVE-2007-4377 requires remote authenticated users to exploit the vulnerability.
5
What component of SurgeMail does CVE-2007-4377 involve?
CVE-2007-4377 involves a stack-based buffer overflow in the IMAP service of SurgeMail.