CVE-2008-3606: Qbik Wingate

Medium severity, CVSS 6.5. EPSS: 4.5% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

Affected products

• Qbik Wingate: up to and including 6.2.2; version 2.0 only; version 2.1 only; version 3.0 only; version 3.0.5 only; version 4.0.1 only; …

Published 2008-08-12. Last modified 2026-06-16.