CVE-2008-4250
9.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka “Server Service Vulnerability.”
References
blogs.securiteam.com/index.php/archives/1150
marc.info/?l=bugtraq&m=122703006921213&w=2
secunia.com/advisories/32326
www.kb.cert.org/vuls/id/827267
www.securityfocus.com/archive/1/497808/100/0/threaded
www.securityfocus.com/archive/1/497816/100/0/threaded
www.securityfocus.com/bid/31874
www.securitytracker.com/id?1021091
www.us-cert.gov/cas/techalerts/TA08-297A.html
www.us-cert.gov/cas/techalerts/TA09-088A.html
www.vupen.com/english/advisories/2008/2902
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-067
exchange.xforce.ibmcloud.com/vulnerabilities/46040
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6093
www.exploit-db.com/exploits/6824
www.exploit-db.com/exploits/6841
www.exploit-db.com/exploits/7104
www.exploit-db.com/exploits/7132
Social References
More
Related
9.4 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.975 High
EPSS
Percentile
100.0%