CVE-2008-1055
Last modified
CVE-2008-1055 is a vulnerability of currently unknown severity. Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.. EPSS estimates a 7.95% chance of exploitation in the next 30 days.
Description
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Netwin | Surgemail | <= 38k4 |
| Netwin | Surgemail | 1.8a |
| Netwin | Surgemail | 1.8b3 |
| Netwin | Surgemail | 1.8d |
| Netwin | Surgemail | 1.8e |
| Netwin | Surgemail | 1.8g3 |
| Netwin | Surgemail | 1.9 |
| Netwin | Surgemail | 1.9b2 |
| Netwin | Surgemail | 2.0a2 |
| Netwin | Surgemail | 2.0c |
| Netwin | Surgemail | 2.0e |
| Netwin | Surgemail | 2.0g2 |
| Netwin | Surgemail | 2.1a |
| Netwin | Surgemail | 2.1c7 |
| Netwin | Surgemail | 2.2a6 |
| Netwin | Surgemail | 2.2c9 |
| Netwin | Surgemail | 2.2c10 |
| Netwin | Surgemail | 2.2g2 |
| Netwin | Surgemail | 2.2g3 |
| Netwin | Surgemail | 3.0a |
| Netwin | Surgemail | 3.0c2 |
| Netwin | Surgemail | 3.8f3 |
| Netwin | Surgemail | 39a |
| Netwin | Surgemail | beta_39a |
| Netwin | Webmail | <= 3.1s |
References
- http://secunia.com/advisories/29105Vendor Advisory
- http://secunia.com/advisories/29105Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-1055?
How severe is CVE-2008-1055?
How do I fix CVE-2008-1055?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-1049Unspecified vulnerability in Parallels SiteStudio before 1.7…
- CVE-2008-1050SQL injection vulnerability in index.php in Softbiz Jokes & …
- CVE-2008-1051PHP remote file inclusion vulnerability in include/body_comm…
- CVE-2008-1052The administration web interface in NetWin SurgeFTP 2.3a2 an…
- CVE-2008-1053Multiple SQL injection vulnerabilities in the Kose_Yazilari …
- CVE-2008-1054Stack-based buffer overflow in the _lib_spawn_user_getpid fu…
- CVE-2008-1056Multiple stack-based buffer overflows in Symark PowerBroker …
- CVE-2008-1057The ip6_check_rh0hdr function in netinet6/ip6_input.c in Ope…
- CVE-2008-1058The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.…
- CVE-2008-1059PHP remote file inclusion vulnerability in modules/syntax_hi…
- CVE-2008-1060Eval injection vulnerability in modules/execute.php in the S…
- CVE-2008-1061Multiple cross-site scripting (XSS) vulnerabilities in the S…
Are you affected by CVE-2008-1055?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST