Vulnerability in Netwin Dmail

CVE-2001-1355

Buffer overflows in NetWin Authentication Module (NWAuth) 3.0b and earlier, as implemented in DMail, SurgeFTP, and possibly other packages, could allow attackers to execute arbitrary code via long arguments to (1) the -del command or (2) the -lookup command.

EPSS: 0.036 (88.2th percentile) — read the EPSS interpretation.

Affected products

Netwin Dmail — versions 2.5d, 2.7, 2.7q
Netwin Surgeftp — versions 1.0b, 2.0a, 2.0b
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)