CVE-2008-3606 - CVE House
Back to Database
Status published Medium CVE-2008-3606

Heap-based buffer overflow in the IMAP service in Qbik WinGate...

Vulnerability Description

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3606

Credits & Attribution

No credits recorded in the NVD database.

References

More from qbik

View All →
CVE-2020-13866
WinGate v9.4.1.5998 has insecure permissions for the installation directory, which...
High 7.8
CVE-2009-0802
Qbik WinGate, when transparent interception mode is enabled, uses the...
Medium 5.4
CVE-2007-4335
Format string vulnerability in the SMTP server component in Qbik...
Medium 5
CVE-2006-4518
Qbik WinGate 6.1.4 and earlier allows remote attackers to cause...
Medium 5
CVE-2006-2926
Stack-based buffer overflow in the WWW Proxy Server of Qbik...
High 7.5

Affected Vendor

Affected Software

wingate
Vulnerable Versions:
0, 2.0, 2.1, 3.0, 3.0.5, 4.0.1, 4.1, 4.1.0, 4.1.1, 4.2.0, 4.3.0, 4.4.0, 4.4.1, 4.4.2, 4.5.0, 4.5.1, 4.5.2, 5.0, 5.0.0, 5.0.1, 5.0.1.766, 5.0.5, 5.1, 5.2, 5.2.2, 5.2.3, 6.0, 6.0.0.984, 6.0.1.993, 6.0.1.995, 6.0.2.1000, 6.0.2.1001, 6.0.3.1005, 6.0.4.1025, 6.1.1.1077, 6.1.2.1094, 6.1.3.1096, 6.1.4, 6.2.1, 6.2.2.1137

Timeline

Official Publish: August 12th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.