Read the docs
TI-2004-02417 Aliases CVE-2004-2547GHSA-p72x-wpgm-6rr5

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain…

Priority LOW 19Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

NetWin (1) SurgeMail before 2.0c and (2) WebMail allow remote attackers to obtain sensitive information via HTTP requests that (a) specify the / URI, (b) specify the /scripts/ URI, or (c) specify a non-existent file, which reveal the path in an error message.

Why it matters now

EPSS 0.03094 87th percentileScored 2026-11-07
Public exploit Yes 3 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:netwin:surgemail:1.0c:*:*:*:*:*:*:*1.0cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.0d:*:*:*:*:*:*:*1.0dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.1a:*:*:*:*:*:*:*1.1aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.1b:*:*:*:*:*:*:*1.1bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.1c:*:*:*:*:*:*:*1.1cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.1d:*:*:*:*:*:*:*1.1dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.2a:*:*:*:*:*:*:*1.2aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.2b:*:*:*:*:*:*:*1.2bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.2c:*:*:*:*:*:*:*1.2cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3a:*:*:*:*:*:*:*1.3aVulnerableNetWin
  • cpe:2.3:a:netwin:surgemail:1.0c:*:*:*:*:*:*:* Versions 1.0c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.0d:*:*:*:*:*:*:* Versions 1.0d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.1a:*:*:*:*:*:*:* Versions 1.1a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.1b:*:*:*:*:*:*:* Versions 1.1b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.1c:*:*:*:*:*:*:* Versions 1.1c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.1d:*:*:*:*:*:*:* Versions 1.1d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.2a:*:*:*:*:*:*:* Versions 1.2a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.2b:*:*:*:*:*:*:* Versions 1.2b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.2c:*:*:*:*:*:*:* Versions 1.2c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3a:*:*:*:*:*:*:* Versions 1.3a Vulnerable ·NetWin
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:netwin:surgemail:1.3a_rc1:*:*:*:*:*:*:*1.3a_rc1VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3b:*:*:*:*:*:*:*1.3bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3c:*:*:*:*:*:*:*1.3cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3d:*:*:*:*:*:*:*1.3dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3e:*:*:*:*:*:*:*1.3eVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3f:*:*:*:*:*:*:*1.3fVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3g:*:*:*:*:*:*:*1.3gVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3h:*:*:*:*:*:*:*1.3hVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3i:*:*:*:*:*:*:*1.3iVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3j:*:*:*:*:*:*:*1.3jVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3k:*:*:*:*:*:*:*1.3kVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.3l:*:*:*:*:*:*:*1.3lVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.4a:*:*:*:*:*:*:*1.4aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.4b:*:*:*:*:*:*:*1.4bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.4c:*:*:*:*:*:*:*1.4cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5a:*:*:*:*:*:*:*1.5aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5b:*:*:*:*:*:*:*1.5bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5c:*:*:*:*:*:*:*1.5cVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5d:*:*:*:*:*:*:*1.5dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5d2:*:*:*:*:*:*:*1.5d2VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.5f:*:*:*:*:*:*:*1.5fVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.6a:*:*:*:*:*:*:*1.6aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.6b:*:*:*:*:*:*:*1.6bVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.6d:*:*:*:*:*:*:*1.6dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.6e:*:*:*:*:*:*:*1.6eVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.6e2:*:*:*:*:*:*:*1.6e2VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.7a:*:*:*:*:*:*:*1.7aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.7b3:*:*:*:*:*:*:*1.7b3VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:*1.8aVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:*1.8b3VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:*1.8dVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:*1.8eVulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:*1.8g3VulnerableNetWin
cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:*1.9b2VulnerableNetWin
cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:*2.0a2VulnerableNetWin
cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:*3.1dVulnerableNetWin
  • cpe:2.3:a:netwin:surgemail:1.3a_rc1:*:*:*:*:*:*:* Versions 1.3a_rc1 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3b:*:*:*:*:*:*:* Versions 1.3b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3c:*:*:*:*:*:*:* Versions 1.3c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3d:*:*:*:*:*:*:* Versions 1.3d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3e:*:*:*:*:*:*:* Versions 1.3e Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3f:*:*:*:*:*:*:* Versions 1.3f Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3g:*:*:*:*:*:*:* Versions 1.3g Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3h:*:*:*:*:*:*:* Versions 1.3h Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3i:*:*:*:*:*:*:* Versions 1.3i Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3j:*:*:*:*:*:*:* Versions 1.3j Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3k:*:*:*:*:*:*:* Versions 1.3k Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.3l:*:*:*:*:*:*:* Versions 1.3l Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.4a:*:*:*:*:*:*:* Versions 1.4a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.4b:*:*:*:*:*:*:* Versions 1.4b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.4c:*:*:*:*:*:*:* Versions 1.4c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5a:*:*:*:*:*:*:* Versions 1.5a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5b:*:*:*:*:*:*:* Versions 1.5b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5c:*:*:*:*:*:*:* Versions 1.5c Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5d:*:*:*:*:*:*:* Versions 1.5d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5d2:*:*:*:*:*:*:* Versions 1.5d2 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.5f:*:*:*:*:*:*:* Versions 1.5f Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.6a:*:*:*:*:*:*:* Versions 1.6a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.6b:*:*:*:*:*:*:* Versions 1.6b Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.6d:*:*:*:*:*:*:* Versions 1.6d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.6e:*:*:*:*:*:*:* Versions 1.6e Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.6e2:*:*:*:*:*:*:* Versions 1.6e2 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.7a:*:*:*:*:*:*:* Versions 1.7a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.7b3:*:*:*:*:*:*:* Versions 1.7b3 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:* Versions 1.8a Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:* Versions 1.8b3 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:* Versions 1.8d Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:* Versions 1.8e Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:* Versions 1.8g3 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:* Versions 1.9b2 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:* Versions 2.0a2 Vulnerable ·NetWin
  • cpe:2.3:a:netwin:webmail:3.1d:*:*:*:*:*:*:* Versions 3.1d Vulnerable ·NetWin

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-2547
  2. 2026-10-03 Alias added: GHSA-p72x-wpgm-6rr5

References

Exploit 3

Patch 1

  • TI-2008-01435 Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier… CVSS 2.0HIGH 9.0
  • TI-2008-01434 Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier… CVSS 2.0HIGH 9.0
  • TI-2004-02407 Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack… CVSS 2.0HIGH 10.0
  • TI-2007-04232 Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown… CVSS 2.0HIGH 10.0
  • TI-2008-01009 Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta… CVSS 2.0HIGH 7.5
  • TI-2008-06870 Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions… CVSS 2.0MEDIUM 4.0
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences