Lucene search
HistoryMar 10, 2008 - 11:44 p.m.
CVE-2008-1278
remotelyanywhere
denial of service
crash
vulnerability
cve-2008-1278
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.062 Low
EPSS
Percentile
93.6%
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted.
Affected configurations
Node
remotelyanywhereremotelyanywhereRange≤8.0.668server
ORremotelyanywhereremotelyanywhereRange≤8.0.668workstation
| CPE | Name | Operator | Version |
|---|---|---|---|
| remotelyanywhere:remotelyanywhere | remotelyanywhere | le | 8.0.668 |
Related
cvelist
cvelist
CVE-2008-1278
2008-03-10 23:00:00
nvd
nvd
CVE-2008-1278
2008-03-10 23:44:00
prion
prion
Null pointer dereference
2008-03-10 23:44:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.062 Low
EPSS
Percentile
93.6%
Related for CVE-2008-1278