Lucene search

K
cve[email protected]CVE-2008-3286
HistoryJul 24, 2008 - 5:41 p.m.

CVE-2008-3286

2008-07-2417:41:00
CWE-20
web.nvd.nist.gov
18
cve-2008-3286
swat 4
denial of service
remote attackers
null pointer dereference
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (2) GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or (3) a GAMESPYRESPONSE command followed by a long RS string.

Affected configurations

NVD
Node
sierraswat_4Range1.1
CPENameOperatorVersion
sierra:swat_4sierra swat 4le1.1

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

6.8 Medium

AI Score

Confidence

High

0.053 Low

EPSS

Percentile

93.1%

Related for CVE-2008-3286