CVE-2008-1055
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-1055
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta 39a, and WebMail 3.1s and earlier, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via format string specifiers in the page parameter.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
SurgeMail webmail.exe 远程格式化字符串漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
NetWin SurgeMail是新西兰NetWin公司的一款下一代电子邮件服务器。该服务器支持IMAP、POP3、SMTP等协议，并提供邮件杀毒、垃圾邮件过滤、邮件备份等功能。 SurgeMail中用于处理webmail接口(webmail.exe)的CGI存在安全漏洞，远程攻击者可能利用此漏洞控制服务器。 CGI中用于在请求错误页面时构建错误消息的函数未经验证格式参数便直接将其传送给了lvprintf： "TPL: Failed to Locate Template {c:\surgemail\web
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-1055
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-1055
请登录查看更多情报信息。
- http://aluigi.altervista.org/adv/surgemailz-adv.txtx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2008-1055
Same Patch Batch · n/a · 2008-02-27 · 19 CVEs total
| CVE-2008-1046 | quinsonnas_mail_checker ‘footer.php’ 远程文件包含漏洞 | |
| CVE-2008-1054 | SurgeMail CGI可执行程序缓冲区溢出漏洞 | |
| CVE-2008-1053 | PHP-Nuke Kose_Yazilari模块多个SQL注入漏洞 | |
| CVE-2008-1052 | SurgeFTP Content-Length参数空指针引用拒绝服务漏洞 | |
| CVE-2008-1051 | phpProfiles 'include/body_comm.inc.php' 远程文件包含漏洞 | |
| CVE-2008-1050 | Softbiz Jokes和Funny Pictures Script ‘index.php’ SQL注入漏洞 | |
| CVE-2008-1049 | H-Sphere Parallels SiteStudio 未明漏洞 | |
| CVE-2008-1048 | Plume CMS 'manager/xmedia.php' 跨站脚本攻击漏洞 | |
| CVE-2008-1047 | TikiWiki 'tiki-edit_article.php' 跨站脚本攻击漏洞 | |
| CVE-2008-1037 | Packeteer PacketShaper/PolicyCenter 网页管理界面 跨站脚本攻击漏洞 | |
| CVE-2008-1045 | Alkacon OpenCms 'system/workplace/views/explorer/tree_files.jsp' 跨站脚本攻击漏洞 | |
| CVE-2008-1044 | Move Media Player Quantum Streaming IE播放器ActiveX控件 缓冲区溢出漏洞 | |
| CVE-2008-1043 | LWS php User Base 'templates/default/header.inc.php' 远程文件包含漏洞 | |
| CVE-2008-1042 | LWS php Download Manager 'include/body.inc.php' 目录遍历漏洞 | |
| CVE-2008-1041 | Matt's Whois 'mwhois.php' 跨站脚本攻击漏洞 | |
| CVE-2008-1040 | Fujitsu Interstage Application Server Single Sign-On函数 缓冲区溢出漏洞 | |
| CVE-2008-1039 | PORAR Webboard 'question.asp' SQL注入漏洞 | |
| CVE-2008-1038 | DrBenHur.com DBHcms 'mod.extmanager.php' 远程文件包含漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2008-1055
No comments yet