Lucene search
HistoryNov 29, 2008 - 2:30 a.m.
CVE-2008-5280
cve-2008-5280
zilab chat
instant messaging
zim server
null pointer dereference
denial of service
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.062 Low
EPSS
Percentile
93.6%
The Local ZIM Server in Zilab Chat and Instant Messaging (ZIM) Server 2.0 and 2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via crafted requests without required parameters.
Affected configurations
Node
zilabzim_serverRange≤2.1
ORzilabzim_serverMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| zilab:zim_server | zilab zim server | le | 2.1 |
| zilab:zim_server | zilab zim server | eq | 2.0 |
Related
cvelist
cvelist
CVE-2008-5280
2008-11-29 02:00:00
prion
prion
Null pointer dereference
2008-11-29 02:30:00
nvd
nvd
CVE-2008-5280
2008-11-29 02:30:00
openvas
openvas
ZIM Server Multiple Vulnerabilities
2008-12-03 00:00:00
ZIM Server Multiple Vulnerabilities
2008-12-03 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
6.6 Medium
AI Score
Confidence
High
0.062 Low
EPSS
Percentile
93.6%
Related for CVE-2008-5280