CVE-2007-0886

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-12 · updated 2026-06-16
Weakness: CWE-119

Description

Heap-based buffer underflow in axigen 1.2.6 through 2.0.0b1 allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via certain base64-encoded data on the pop3 port (110/tcp), which triggers an integer overflow.

Affected products

Gecad Technologies Axigen Mail Server: 1.2.6, 2.0.0b1

References

http://marc.info/?l=full-disclosure&m=117094708423302&w=2
http://osvdb.org/38133
http://secunia.com/advisories/24073
http://www.securityfocus.com/bid/22473
https://exchange.xforce.ibmcloud.com/vulnerabilities/32342
https://www.exploit-db.com/exploits/3289
http://marc.info/?l=full-disclosure&m=117094708423302&w=2
http://osvdb.org/38133
http://secunia.com/advisories/24073
http://www.securityfocus.com/bid/22473
https://exchange.xforce.ibmcloud.com/vulnerabilities/32342
https://www.exploit-db.com/exploits/3289

Get alerted when CVE-2007-0886 or the next vulnerability affects your stack