First published: Wed Jun 25 2008(Updated: )
Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
NetWin SurgeMail | =3.8s | |
NetWin SurgeMail | =3.8d | |
NetWin SurgeMail | =3.9a | |
NetWin SurgeMail | =3.8b | |
NetWin SurgeMail | =3.8i3 | |
NetWin SurgeMail | =3.8a | |
NetWin SurgeMail | =3.8k3 | |
NetWin SurgeMail | =3.9c | |
NetWin SurgeMail | <=3.9g | |
NetWin SurgeMail | =3.8f2 | |
NetWin SurgeMail | =3.8m | |
NetWin SurgeMail | =3.8q | |
NetWin SurgeMail | =3.8u | |
NetWin SurgeMail | =3.8f | |
NetWin SurgeMail | =3.8k4 | |
NetWin SurgeMail | =3.8o | |
NetWin SurgeMail | =3.8i2 | |
NetWin SurgeMail | =3.8i | |
NetWin SurgeMail | =3.8k | |
NetWin SurgeMail | =3.8f3 | |
NetWin SurgeMail | =3.9e | |
NetWin SurgeMail | =3.8k2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2008-2859 has a high severity rating due to its potential to cause a denial of service with crashing effects on the IMAP service.
To mitigate CVE-2008-2859, you should upgrade to NetWin SurgeMail version 3.9g2 or later.
CVE-2008-2859 affects all versions of NetWin SurgeMail up to and including 3.9g.
Exploiting CVE-2008-2859 can result in a denial of service by crashing the SurgeMail daemon.
There are no known workarounds for CVE-2008-2859, so it is recommended to upgrade to a patched version.