Lucene search

[email protected]CVE-2008-0974

HistoryFeb 25, 2008 - 11:44 p.m.

CVE-2008-0974

2008-02-2523:44:00

CWE-399

[email protected]

web.nvd.nist.gov

cve-2008-0974

double-take

hp storageworks storage mirroring

denial of service

vulnerability

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

JSON

Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a “vector<T> too long” exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.

Affected configurations

NVD

Node

double-take_softwaredouble-takeRange≤5.0.0.2865

double-take_softwaredouble-takeMatch4.5

hpstorageworks_double-takeRange≤5.0.0.2865

CPENameOperatorVersion
double-take_software:double-takedouble-take software double-takele5.0.0.2865
double-take_software:double-takedouble-take software double-takeeq4.5
hp:storageworks_double-takehp storageworks double-takele5.0.0.2865

CPE	Name	Operator	Version
double-take_software:double-take	double-take software double-take	le	5.0.0.2865
double-take_software:double-take	double-take software double-take	eq	4.5
hp:storageworks_double-take	hp storageworks double-take	le	5.0.0.2865

References

aluigi.altervista.org/adv/doubletakedown-adv.txt

aluigi.org/poc/doubletakedown.zip

secunia.com/advisories/29075

securityreason.com/securityalert/3698

www.securityfocus.com/archive/1/488632/100/0/threaded

www.securityfocus.com/bid/27951

www.vupen.com/english/advisories/2008/0666

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.7 Medium

AI Score

Confidence

High

0.04 Low

EPSS

Percentile

92.1%

JSON

Related for CVE-2008-0974

prion1 cvelist1 nvd1