Lucene search
MitreCVE-2008-3606HistoryAug 12, 2008 - 7:41 p.m.
CVE-2008-3606
2008-08-1219:41:00
CWE-119
mitre
web.nvd.nist.gov
34
cve-2008-3606
heap-based
buffer overflow
imap
qbik wingate
denial of service
remote code execution
nvd
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.075
Percentile
94.2%
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.
Affected configurations
Node
qbikwingateRange≤6.2.2
ORqbikwingateMatch2.0
ORqbikwingateMatch2.1
ORqbikwingateMatch3.0
ORqbikwingateMatch3.0.5
ORqbikwingateMatch4.0.1
ORqbikwingateMatch4.1beta_a
ORqbikwingateMatch4.1.0
ORqbikwingateMatch4.1.1
ORqbikwingateMatch4.2.0
ORqbikwingateMatch4.3.0
ORqbikwingateMatch4.3.0beta_a
ORqbikwingateMatch4.3.0beta_b
ORqbikwingateMatch4.4.0
ORqbikwingateMatch4.4.0beta_a
ORqbikwingateMatch4.4.1
ORqbikwingateMatch4.4.2
ORqbikwingateMatch4.5.0beta_a
ORqbikwingateMatch4.5.0beta_b
ORqbikwingateMatch4.5.1
ORqbikwingateMatch4.5.2
ORqbikwingateMatch5.0
ORqbikwingateMatch5.0.0
ORqbikwingateMatch5.0.1
ORqbikwingateMatch5.0.1.766
ORqbikwingateMatch5.0.5
ORqbikwingateMatch5.1
ORqbikwingateMatch5.2
ORqbikwingateMatch5.2.2
ORqbikwingateMatch5.2.3
ORqbikwingateMatch6.0
ORqbikwingateMatch6.0.0.984
ORqbikwingateMatch6.0.1.993
ORqbikwingateMatch6.0.1.995
ORqbikwingateMatch6.0.2.1000
ORqbikwingateMatch6.0.2.1001
ORqbikwingateMatch6.0.3.1005
ORqbikwingateMatch6.0.4.1025
ORqbikwingateMatch6.1.1.1077
ORqbikwingateMatch6.1.2.1094
ORqbikwingateMatch6.1.3.1096
ORqbikwingateMatch6.1.4
ORqbikwingateMatch6.2.1
ORqbikwingateMatch6.2.2.1137
| Vendor | Product | Version | CPE |
|---|---|---|---|
| qbik | wingate | * | cpe:2.3:a:qbik:wingate:*:*:*:*:*:*:*:* |
| qbik | wingate | 2.0 | cpe:2.3:a:qbik:wingate:2.0:*:*:*:*:*:*:* |
| qbik | wingate | 2.1 | cpe:2.3:a:qbik:wingate:2.1:*:*:*:*:*:*:* |
| qbik | wingate | 3.0 | cpe:2.3:a:qbik:wingate:3.0:*:*:*:*:*:*:* |
| qbik | wingate | 3.0.5 | cpe:2.3:a:qbik:wingate:3.0.5:*:*:*:*:*:*:* |
| qbik | wingate | 4.0.1 | cpe:2.3:a:qbik:wingate:4.0.1:*:*:*:*:*:*:* |
| qbik | wingate | 4.1 | cpe:2.3:a:qbik:wingate:4.1:beta_a:*:*:*:*:*:* |
| qbik | wingate | 4.1.0 | cpe:2.3:a:qbik:wingate:4.1.0:*:*:*:*:*:*:* |
| qbik | wingate | 4.1.1 | cpe:2.3:a:qbik:wingate:4.1.1:*:*:*:*:*:*:* |
| qbik | wingate | 4.2.0 | cpe:2.3:a:qbik:wingate:4.2.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2008-3606
2008-08-12 19:41:00
openvas
openvas
WinGate IMAP Server Buffer Overflow Vulnerability
2008-08-22 00:00:00
WinGate IMAP Server Buffer Overflow Vulnerability
2008-08-22 00:00:00
prion
prion
Heap overflow
2008-08-12 19:41:00
cvelist
cvelist
CVE-2008-3606
2008-08-12 19:00:00
exploitdb
exploitdb
Qbik WinGate 6.2.2 - 'LIST' Remote Denial of Service
2008-08-08 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
8
Confidence
High
EPSS
0.075
Percentile
94.2%
Related for CVE-2008-3606