Lucene search

K
cve[email protected]CVE-2008-0871
HistoryFeb 21, 2008 - 7:44 p.m.

CVE-2008-0871

2008-02-2119:44:00
CWE-119
web.nvd.nist.gov
19
cve-2008-0871
now sms
mms gateway
buffer overflow
remote code execution
http service
smpp service
nvd

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%

Multiple stack-based buffer overflows in Now SMS/MMS Gateway 2007.06.27 and earlier allow remote attackers to execute arbitrary code via a (1) long password in an Authorization header to the HTTP service or a (2) large packet to the SMPP service.

Affected configurations

NVD
Node
nowsms_mms_gatewayRange2007.06.27

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

7.9 High

AI Score

Confidence

Low

0.888 High

EPSS

Percentile

98.7%