Lucene search

MitreCVE-2008-1690

HistoryApr 07, 2008 - 5:44 p.m.

CVE-2008-1690

2008-04-0717:44:00

CWE-399

mitre

web.nvd.nist.gov

cve-2008-1690

slmail pro

remote code execution

memory corruption

daemon crash

http requests

tcp port 801

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.211

Percentile

96.5%

JSON

WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a long URI in HTTP requests to TCP port 801. NOTE: some of these details are obtained from third party information.

Affected configurations

Nvd

Node

seattle_lab_softwareslmail_proRange≤6.3.1.0

VendorProductVersionCPE
seattle_lab_softwareslmail_pro*cpe:2.3:a:seattle_lab_software:slmail_pro:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
seattle_lab_software	slmail_pro	*	cpe:2.3:a:seattle_lab_software:slmail_pro::::::::

References

aluigi.org/poc/slmaildos.zip

secunia.com/advisories/29614

www.securityfocus.com/bid/28505

www.vupen.com/english/advisories/2008/1039/references

exchange.xforce.ibmcloud.com/vulnerabilities/41531

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.211

Percentile

96.5%

JSON

Related for CVE-2008-1690