>> SurgeMail IMAP Command Handling Denial of Service Vulnerability
Title : SurgeMail IMAP Command Handling Denial of Service Vulnerability VUPEN ID : VUPEN/ADV-2008-1874 CVE ID : CVE-2008-2859 CWE ID : CWE-19
Rated as : Low Risk
Remotely Exploitable : Yes Locally Exploitable : Yes Release Date : 2008-06-19
Technical Description
A vulnerability has been identified in SurgeMail, which could be exploited by attackers to cause a denial of service. This issue is caused by an unspecified error when processing certain IMAP commands, which could be exploited by attackers to crash an affected application, creating a denial of service condition.