MitreCVE-2008-5030

HistoryNov 10, 2008 - 4:15 p.m.

CVE-2008-5030

2008-11-1016:15:12

CWE-119

mitre

web.nvd.nist.gov

cve-2008-5030

buffer overflow

libcdaudio

cddb

remote code execution

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON

Heap-based buffer overflow in the cddb_read_disc_data function in cddb.c in libcdaudio 0.99.12p2 allows remote CDDB servers to execute arbitrary code via long CDDB data.

Affected configurations

Nvd

Node

libcaudiolibcaudioMatch0.99.12p2

VendorProductVersionCPE
libcaudiolibcaudio0.99.12p2cpe:2.3:a:libcaudio:libcaudio:0.99.12p2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
libcaudio	libcaudio	0.99.12p2	cpe:2.3:a:libcaudio:libcaudio:0.99.12p2:::::::*

References

lists.opensuse.org/opensuse-security-announce/2008-11/msg00000.html

secunia.com/advisories/32678

secunia.com/advisories/34353

security.gentoo.org/glsa/glsa-200903-31.xml

sourceforge.net/tracker/index.php?func=detail&aid=1288043&group_id=27134&atid=389442

www.debian.org/security/2008/dsa-1665

www.mandriva.com/security/advisories?name=MDVSA-2008:233

www.openwall.com/lists/oss-security/2008/11/05/1

www.openwall.com/lists/oss-security/2008/11/07/1

www.openwall.com/lists/oss-security/2008/11/11/4

www.openwall.com/lists/oss-security/2008/11/11/6

www.securityfocus.com/bid/32122

www.vupen.com/english/advisories/2008/3132

exchange.xforce.ibmcloud.com/vulnerabilities/46392

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.7

Confidence

Low

EPSS

0.02

Percentile

88.9%

JSON

Related for CVE-2008-5030