SurgeMail 'APPEND' Command Buffer Overflow Vulnerability

Summary
This host is running SurgeMail and is prone to Buffer Overflow vulnerability.
Impact
Successful exploitation could allow remote authenticated users to cause a Denial of Service and possibly execute arbitrary code in the victim's system. Impact Level: Application
Solution
Upgrade to SurgeMail version 3.9g2 or later http://netwinsite.com/download.htm
Insight
Buffer overflow in the IMAP service is caused due the way it handles the APPEND command which can be exploited via a long first argument.
Affected
SurgeMail version prior to 3.9g2
References