Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5426
HistoryDec 11, 2008 - 3:30 p.m.

CVE-2008-5426

2008-12-1115:30:00
CWE-399
[email protected]
web.nvd.nist.gov
22
kaspersky
internet security
suite 2009
denial of service
vulnerability
cve-2008-5426
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.6 High

AI Score

Confidence

High

0.349 Low

EPSS

Percentile

97.1%

JSON

Kaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many “Content-type: message/rfc822;” headers, which allows remote attackers to cause a denial of service (stack consumption or other resource consumption) via a large e-mail message, a related issue to CVE-2006-1173.

Affected configurations

NVD
Node
kaspersky_labkaspersky_internet_security_suiteMatch2009

Related

cvelist 9
prion 9
nvd 9
openvas 12
cert 1
debian 2
nessus 21
gentoo 1
centos 2
slackware 1
cve 8
redhat 1
ubuntucve 2
freebsd_advisory 1
freebsd 1
suse 1
debiancve 1
securityvulns 1
cvelist
cvelist
CVE-2008-5426
2008-12-11 15:00:00
CVE-2006-1173
2006-06-07 23:00:00
CVE-2008-5425
2008-12-11 15:00:00
prion
prion
Design/Logic Flaw
2008-12-11 15:30:00
Stack overflow
2006-06-07 23:06:00
Design/Logic Flaw
2008-12-11 15:30:00
nvd
nvd
CVE-2008-5426
2008-12-11 15:30:00
CVE-2006-1173
2006-06-07 23:06:00
CVE-2008-5429
2008-12-11 15:30:00
openvas
openvas
Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability
2008-12-18 00:00:00
Kaspersky Internet Security Suite Malformed MIME Message DoS Vulnerability
2008-12-18 00:00:00
Debian Security Advisory DSA 1155-1 (sendmail)
2008-01-17 00:00:00
cert
cert
Sendmail fails to handle malformed multipart MIME messages
2006-06-14 00:00:00
debian
debian
[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service
2006-08-24 06:23:59
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service
2006-08-24 09:16:49
nessus
nessus
HP-UX PHNE_34900 : HP-UX Sendmail MIME Remote Denial of Service (DoS) (HPSBUX02124 SSRT061159 rev.2)
2006-08-08 00:00:00
Mandrake Linux Security Advisory : sendmail (MDKSA-2006:104)
2006-06-16 00:00:00
CentOS 3 / 4 : sendmail (CESA-2006:0515)
2006-07-03 00:00:00
gentoo
gentoo
Sendmail: Denial of service
2006-06-15 00:00:00
centos
centos
sendmail security update
2006-06-14 21:17:41
sendmail security update
2006-06-18 23:46:01
slackware
slackware
[slackware-security] sendmail
2006-06-15 08:39:54
cve
cve
CVE-2006-1173
2006-06-07 23:06:00
CVE-2008-5425
2008-12-11 15:30:00
CVE-2008-5430
2008-12-13 08:40:08
redhat
redhat
(RHSA-2006:0515) sendmail security update
2006-06-14 00:00:00
ubuntucve
ubuntucve
CVE-2006-1173
2006-06-07 00:00:00
CVE-2008-5430
2008-12-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:17.sendmail
2006-06-14 00:00:00
freebsd
freebsd
sendmail -- Incorrect multipart message handling
2006-06-14 00:00:00
suse
suse
remote denial of service in sendmail
2006-06-14 19:08:15
debiancve
debiancve
CVE-2006-1173
2006-06-07 23:06:00
securityvulns
securityvulns
DoS attacks on MIME-capable software via complex MIME emails
2008-12-09 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.6 High

AI Score

Confidence

High

0.349 Low

EPSS

Percentile

97.1%

JSON
Related for CVE-2008-5426
cvelist9prion9nvd9openvas12cert1debian2nessus21gentoo1centos2slackware1cve8redhat1ubuntucve2freebsd_advisory1freebsd1suse1debiancve1securityvulns1