CVE-2007-4377

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-16 · updated 2026-06-16

Description

Stack-based buffer overflow in the IMAP service in SurgeMail 38k allows remote authenticated users to execute arbitrary code via a long argument to the SEARCH command. NOTE: this might overlap CVE-2007-4372.

Affected products

NetWin SurgeMail: 38k

References

http://marc.info/?l=full-disclosure&m=118710179924684&w=2
http://secunia.com/advisories/26464
http://www.securityfocus.com/bid/25318
http://www.vupen.com/english/advisories/2007/2875
https://exchange.xforce.ibmcloud.com/vulnerabilities/36009
https://www.exploit-db.com/exploits/4287
http://marc.info/?l=full-disclosure&m=118710179924684&w=2
http://secunia.com/advisories/26464
http://www.securityfocus.com/bid/25318
http://www.vupen.com/english/advisories/2007/2875
https://exchange.xforce.ibmcloud.com/vulnerabilities/36009
https://www.exploit-db.com/exploits/4287

Get alerted when CVE-2007-4377 or the next vulnerability affects your stack