Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SurgeMail webmail.exe 远程格式化字符串漏洞
Vulnerability Description
NetWin SurgeMail是新西兰NetWin公司的一款下一代电子邮件服务器。该服务器支持IMAP、POP3、SMTP等协议，并提供邮件杀毒、垃圾邮件过滤、邮件备份等功能。 SurgeMail中用于处理webmail接口(webmail.exe)的CGI存在安全漏洞，远程攻击者可能利用此漏洞控制服务器。 CGI中用于在请求错误页面时构建错误消息的函数未经验证格式参数便直接将其传送给了lvprintf： "TPL: Failed to Locate Template {c:\surgemail\web
CVSS Information
N/A
Vulnerability Type
N/A