SurgeMail 38k4 Format string and Buffer Overflow

SurgeMail is "a well known commercial multiplatform mail server which supports many protocols". A format string and a buffer overflow vulnerability in SurgeMail have been discovered, these vulnerabilities allow a remote attacker to overflow a buffer and manipulate the way the product works.

http://www.securiteam.com/windowsntf...EP040UNPU.html