SurgeMail IMAP Command Unspecified Denial of Service Vulnerability

Bugtraq ID:	29805
Class:	Unknown
CVE:	CVE-2008-2859
Remote:	Yes
Local:	No
Published:	Jun 18 2008 12:00AM
Updated:	May 07 2015 05:28PM
Credit:	Netwin
Vulnerable:	NetWin SurgeMail 3.9g NetWin SurgeMail 3.9a NetWin SurgeMail 3.8k4 NetWin SurgeMail 3.8k NetWin SurgeMail 3.8i3 NetWin SurgeMail 3.8i2 NetWin SurgeMail 3.8i NetWin SurgeMail 3.8f3
Not Vulnerable:	NetWin SurgeMail 3.9g2

SurgeMail IMAP Command Unspecified Denial of Service Vulnerability

SurgeMail is prone to a remote denial-of-service vulnerability caused by an unspecified error when handling certain IMAP commands.

An attacker can exploit this issue to crash the affected application, denying service to legitimate users.

The issue affects versions prior to SurgeMail 3.9g2.

SurgeMail IMAP Command Unspecified Denial of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SurgeMail IMAP Command Unspecified Denial of Service Vulnerability

Solution:
The vendor has released updates. Please see the references for more information.

SurgeMail IMAP Command Unspecified Denial of Service Vulnerability

References:

• SurgeMail Change History (NetWin)
  
• SurgeMail Home Page (NetWin)