Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and…
Priority LOW 39CWE-119Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Stack-based buffer overflow in the _lib_spawn_user_getpid function in (1) swatch.exe and (2) surgemail.exe in NetWin SurgeMail 38k4 and earlier, and beta 39a, allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code via an HTTP request with multiple long headers to webmail.exe and unspecified other CGI executables, which triggers an overflow when assigning values to environment variables. NOTE: some of these details are obtained from third party information.
Why it matters now
EPSS 0.07356 94th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:* | 1.8a | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:* | 1.8b3 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:* | 1.8d | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:* | 1.8e | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:* | 1.8g3 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:* | 1.9 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:* | 1.9b2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:* | 2.0a2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:* | 2.0c | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:* | 2.0e | Vulnerable | NetWin |
- cpe:2.3:a:netwin:surgemail:1.8a:*:*:*:*:*:*:* Versions 1.8a Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.8b3:*:*:*:*:*:*:* Versions 1.8b3 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.8d:*:*:*:*:*:*:* Versions 1.8d Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.8e:*:*:*:*:*:*:* Versions 1.8e Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.8g3:*:*:*:*:*:*:* Versions 1.8g3 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.9:*:*:*:*:*:*:* Versions 1.9 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:1.9b2:*:*:*:*:*:*:* Versions 1.9b2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.0a2:*:*:*:*:*:*:* Versions 2.0a2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.0c:*:*:*:*:*:*:* Versions 2.0c Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.0e:*:*:*:*:*:*:* Versions 2.0e Vulnerable ·NetWin
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:* | 2.0g2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.1a:*:*:*:*:*:*:* | 2.1a | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:* | 2.1c7 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:* | 2.2a6 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.2c9:*:*:*:*:*:*:* | 2.2c9 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:* | 2.2c10 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:* | 2.2g2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:* | 2.2g3 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:* | 3.0a | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:* | 3.0c2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.1s:*:*:*:*:*:*:* | 3.1s | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:* | 3.8f3 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:* | 3.8i | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:* | 3.8i2 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:* | 3.8i3 | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:38k:*:*:*:*:*:*:* | 38k | Vulnerable | NetWin |
| cpe:2.3:a:netwin:surgemail:38k4:*:*:*:*:*:*:* | 38k4 | Vulnerable | NetWin |
- cpe:2.3:a:netwin:surgemail:2.0g2:*:*:*:*:*:*:* Versions 2.0g2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.1a:*:*:*:*:*:*:* Versions 2.1a Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.1c7:*:*:*:*:*:*:* Versions 2.1c7 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.2a6:*:*:*:*:*:*:* Versions 2.2a6 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.2c9:*:*:*:*:*:*:* Versions 2.2c9 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.2c10:*:*:*:*:*:*:* Versions 2.2c10 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.2g2:*:*:*:*:*:*:* Versions 2.2g2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:2.2g3:*:*:*:*:*:*:* Versions 2.2g3 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.0a:*:*:*:*:*:*:* Versions 3.0a Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.0c2:*:*:*:*:*:*:* Versions 3.0c2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.1s:*:*:*:*:*:*:* Versions 3.1s Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.8f3:*:*:*:*:*:*:* Versions 3.8f3 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.8i:*:*:*:*:*:*:* Versions 3.8i Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.8i2:*:*:*:*:*:*:* Versions 3.8i2 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:3.8i3:*:*:*:*:*:*:* Versions 3.8i3 Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:38k:*:*:*:*:*:*:* Versions 38k Vulnerable ·NetWin
- cpe:2.3:a:netwin:surgemail:38k4:*:*:*:*:*:*:* Versions 38k4 Vulnerable ·NetWin
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2008-1054
- 2026-10-03 Alias added: GHSA-2rrp-7c8v-xf6v
References
More NetWin Surgemail vulnerabilities
- TI-2008-01435 Stack-based buffer overflow in the IMAP service in NetWin Surgemail 3.8k4-4 and earlier… CVSS 2.0HIGH 9.0
- TI-2008-01434 Stack-based buffer overflow in the IMAP service in NetWin SurgeMail 38k4-4 and earlier… CVSS 2.0HIGH 9.0
- TI-2004-02407 Unspecified vulnerability in SurgeMail before 2.2c10 has unknown impact and attack… CVSS 2.0HIGH 10.0
- TI-2007-04232 Unspecified vulnerability in NetWin SurgeMail 38k on Windows Server 2003 has unknown… CVSS 2.0HIGH 10.0
- TI-2008-01009 Format string vulnerability in webmail.exe in NetWin SurgeMail 38k4 and earlier and beta… CVSS 2.0HIGH 7.5
- TI-2008-06870 Buffer overflow in the IMAP service in NetWin Surgemail 3.9e, and possibly other versions… CVSS 2.0MEDIUM 4.0
Sources
- CVE-2008-1054 · CVE Program
- CVE-2008-1054 · NVD
- FIRST EPSS
- GHSA-2rrp-7c8v-xf6v · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences