NetSight
IP …
medium6.5Public exploit code

CVE-2008-3606

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

Affected products

VendorProductAffected versions
QbikWingate
through 6.2.2
Versions 2.0, 2.1, 3.0, 3.0.5, 4.0.1

Weakness classification

CWE-119

References