6.5

CVE-2008-3606

Exploit
Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Qbik ≫ Wingate Version <= 6.2.2
Qbik ≫ Wingate Version 2.0
Qbik ≫ Wingate Version 2.1
Qbik ≫ Wingate Version 3.0
Qbik ≫ Wingate Version 3.0.5
Qbik ≫ Wingate Version 4.0.1
Qbik ≫ Wingate Version 4.1 Update beta_a
Qbik ≫ Wingate Version 4.1.0
Qbik ≫ Wingate Version 4.1.1
Qbik ≫ Wingate Version 4.2.0
Qbik ≫ Wingate Version 4.3.0
Qbik ≫ Wingate Version 4.3.0 Update beta_a
Qbik ≫ Wingate Version 4.3.0 Update beta_b
Qbik ≫ Wingate Version 4.4.0
Qbik ≫ Wingate Version 4.4.0 Update beta_a
Qbik ≫ Wingate Version 4.4.1
Qbik ≫ Wingate Version 4.4.2
Qbik ≫ Wingate Version 4.5.0 Update beta_a
Qbik ≫ Wingate Version 4.5.0 Update beta_b
Qbik ≫ Wingate Version 4.5.1
Qbik ≫ Wingate Version 4.5.2
Qbik ≫ Wingate Version 5.0
Qbik ≫ Wingate Version 5.0.0
Qbik ≫ Wingate Version 5.0.1
Qbik ≫ Wingate Version 5.0.1.766
Qbik ≫ Wingate Version 5.0.5
Qbik ≫ Wingate Version 5.1
Qbik ≫ Wingate Version 5.2
Qbik ≫ Wingate Version 5.2.2
Qbik ≫ Wingate Version 5.2.3
Qbik ≫ Wingate Version 6.0
Qbik ≫ Wingate Version 6.0.0.984
Qbik ≫ Wingate Version 6.0.1.993
Qbik ≫ Wingate Version 6.0.1.995
Qbik ≫ Wingate Version 6.0.2.1000
Qbik ≫ Wingate Version 6.0.2.1001
Qbik ≫ Wingate Version 6.0.3.1005
Qbik ≫ Wingate Version 6.0.4.1025
Qbik ≫ Wingate Version 6.1.1.1077
Qbik ≫ Wingate Version 6.1.2.1094
Qbik ≫ Wingate Version 6.1.3.1096
Qbik ≫ Wingate Version 6.1.4
Qbik ≫ Wingate Version 6.2.1
Qbik ≫ Wingate Version 6.2.2.1137
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.45% 0.902
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 8 6.4
AV:N/AC:L/Au:S/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://secunia.com/advisories/31442
Vendor Advisory
http://securityreason.com/securityalert/4146
http://www.securityfocus.com/archive/1/495264/100/0/threaded
http://www.securityfocus.com/bid/30606
Exploit
http://www.securitytracker.com/id?1020644
https://exchange.xforce.ibmcloud.com/vulnerabilities/44370