This host is running SurgeMail and is prone to Buffer Overflow vulnerability.

Successful exploitation could allow remote authenticated users to cause a Denial of Service and possibly execute arbitrary code in the victim's system. Impact Level: Application

Upgrade to SurgeMail version 3.9g2 or later http://netwinsite.com/download.htm

Buffer overflow in the IMAP service is caused due the way it handles the APPEND command which can be exploited via a long first argument.

SurgeMail version prior to 3.9g2

• http://secunia.com/advisories/30739/
• http://www.netwinsite.com/surgemail/help/updates.htm
• http://www.securityfocus.com/archive/1/496482

---

Updated on 2017-03-28