Lucene search

MitreCVE-2008-6175

HistoryFeb 19, 2009 - 4:30 p.m.

CVE-2008-6175

2009-02-1916:30:00

CWE-20

mitre

web.nvd.nist.gov

cve-2008-6175

silvershield

remote attackers

denial of service

application crash

opendir

sftp command

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON

SilverSHielD 1.0.2.34 allows remote attackers to cause a denial of service (application crash) via a crafted argument to the opendir SFTP command.

Affected configurations

Nvd

Node

k2sxssilvershieldMatch1.0.2.34

VendorProductVersionCPE
k2sxssilvershield1.0.2.34cpe:2.3:a:k2sxs:silvershield:1.0.2.34:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
k2sxs	silvershield	1.0.2.34	cpe:2.3:a:k2sxs:silvershield:1.0.2.34:::::::*

References

secunia.com/advisories/32374

www.securityfocus.com/bid/31884

exchange.xforce.ibmcloud.com/vulnerabilities/46064

www.exploit-db.com/exploits/6815

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.8

Confidence

High

EPSS

0.026

Percentile

90.3%

JSON

Related for CVE-2008-6175