CVE-2008-2859: Netwin Surgemail

Medium severity, CVSS 5.0. EPSS: 3.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the IMAP service in NetWin SurgeMail before 3.9g2 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors related to an "imap command."

Affected products

• Netwin Surgemail: up to and including 3.9g; version 3.8a only; version 3.8b only; version 3.8d only; version 3.8f only; version 3.8f2 only; …

Published 2008-06-25. Last modified 2026-06-16.