BID:12086

NetWin SurgeMail Webmail Unspecified Vulnerability

Info

NetWin SurgeMail Webmail Unspecified Vulnerability

Bugtraq ID:	12086
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 23 2004 12:00AM
Updated:	Dec 23 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	NetWin SurgeMail 2.2 a6 NetWin SurgeMail 2.1 c7 NetWin SurgeMail 2.1 a NetWin SurgeMail 2.0 g2 NetWin SurgeMail 2.0 e NetWin SurgeMail 2.0 c NetWin SurgeMail 2.0 a2 NetWin SurgeMail 1.9 b2 NetWin SurgeMail 1.9 NetWin SurgeMail 1.8 g3 NetWin SurgeMail 1.8 e NetWin SurgeMail 1.8 d NetWin SurgeMail 1.8 b3 NetWin SurgeMail 1.8 a

Not Vulnerable:	NetWin SurgeMail 2.2 c9

Discussion

NetWin SurgeMail Webmail Unspecified Vulnerability

SurgeMail is reported prone to an unspecified vulnerability. This issue affects the Webmail functionality of the SurgeMail server. Further details were not released in the report by the vendor. It is conjectured that due to the nature of this application, this vulnerability may result from an input validation error. Although unconfirmed, this issue is considered to be remotely exploitable.

SurgeMail releases prior to 2.2c9 are affected by this vulnerability.

Due to a lack of details, further information is not available at the moment. This BID will be updated when more information becomes available.

Exploit / POC

NetWin SurgeMail Webmail Unspecified Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

NetWin SurgeMail Webmail Unspecified Vulnerability

Solution:
The vendor has released SurgeMail 2.2c9 to address this issue.

NetWin SurgeMail 1.8 d