$ cve CVE-2008-1054 JSON

CVE-2008-1054 EXPLOIT

6.4

MEDIUM · CVSS 2.0 · EPSS 7.4% (pctl 94)

Patch early

A public exploit exists.

Description

Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.

Scoring

CVSS	6.4 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:P
EPSS	7.36% — more likely to be exploited than 94% of all CVEs
Weakness	CWE-119
On CISA KEV	no
Public exploit	yes
Published	2008-02-27
Last modified	2026-06-16

Affected (1)

Vendor	Product
netwin	surgemail

Public exploits

Source	Title	Date
exploit-db	Surgemail 3.0 - Real CGI executables Remote Buffer Overflow	2008-02-25

References

→ the Explorer · watch your stack · NVD