CVE-2008-3606

Published: Aug 12, 2008Modified: Apr 23, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Heap-based buffer overflow in the IMAP service in Qbik WinGate 6.2.2.1137 and earlier allows remote authenticated users to cause a denial of service (resource exhaustion) or possibly execute arbitrary code via a long argument to the LIST command. NOTE: some of these details are obtained from third party information.

Affected (44)

Products: Qbik: Wingate

Qbik

1 product

Wingate

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Qbik Wingate	Up to 6.2.2
Qbik Wingate	Version 2.0
Qbik Wingate	Version 2.1
Qbik Wingate	Version 3.0.5
Qbik Wingate	Version 3.0
Qbik Wingate	Version 4.0.1
Qbik Wingate	Version 4.1.0
Qbik Wingate	Version 4.1.1
Qbik Wingate	Version 4.1 beta_a
Qbik Wingate	Version 4.2.0
Qbik Wingate	Version 4.3.0
Qbik Wingate	Version 4.3.0 beta_a
Qbik Wingate	Version 4.3.0 beta_b
Qbik Wingate	Version 4.4.0
Qbik Wingate	Version 4.4.0 beta_a
Qbik Wingate	Version 4.4.1
Qbik Wingate	Version 4.4.2
Qbik Wingate	Version 4.5.0 beta_a
Qbik Wingate	Version 4.5.0 beta_b
Qbik Wingate	Version 4.5.1
Qbik Wingate	Version 4.5.2
Qbik Wingate	Version 5.0.0
Qbik Wingate	Version 5.0.1.766
Qbik Wingate	Version 5.0.1
Qbik Wingate	Version 5.0.5
Qbik Wingate	Version 5.0
Qbik Wingate	Version 5.1
Qbik Wingate	Version 5.2.2
Qbik Wingate	Version 5.2.3
Qbik Wingate	Version 5.2
Qbik Wingate	Version 6.0.0.984
Qbik Wingate	Version 6.0.1.993
Qbik Wingate	Version 6.0.1.995
Qbik Wingate	Version 6.0.2.1000
Qbik Wingate	Version 6.0.2.1001
Qbik Wingate	Version 6.0.3.1005
Qbik Wingate	Version 6.0.4.1025
Qbik Wingate	Version 6.0
Qbik Wingate	Version 6.1.1.1077
Qbik Wingate	Version 6.1.2.1094
Qbik Wingate	Version 6.1.3.1096
Qbik Wingate	Version 6.1.4
Qbik Wingate	Version 6.2.1
Qbik Wingate	Version 6.2.2.1137