Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.
2002-05-31T04:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 4.6 (MEDIUM)
AV:L/AC:L/Au:N/C:P/I:P/A:P
3.9
6.4
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | netwin | cwmail | 2.7 | Yes |
| Application | netwin | cwmail | 2.7a | Yes |
| Application | netwin | cwmail | 2.7b | Yes |
| Application | netwin | cwmail | 2.7c | Yes |
| Application | netwin | cwmail | 2.7d | Yes |
| Application | netwin | cwmail | 2.7f | Yes |
| Application | netwin | cwmail | 2.7i | Yes |
| Application | netwin | cwmail | 2.7j | Yes |
| Application | netwin | cwmail | 2.7k | Yes |
| Application | netwin | cwmail | 2.7l | Yes |
| Application | netwin | cwmail | 2.7m | Yes |
| Application | netwin | cwmail | 2.7n | Yes |
| Application | netwin | cwmail | 2.7o | Yes |
| Application | netwin | cwmail | 2.7p | Yes |
| Application | netwin | cwmail | 2.7q | Yes |
| Application | netwin | cwmail | 2.7s | Yes |
| Application | netwin | cwmail | 2.7t | Yes |