Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-4250
HistoryOct 23, 2008 - 10:00 p.m.

CVE-2008-4250

2008-10-2322:00:01
CWE-94
[email protected]
web.nvd.nist.gov
1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON

The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka “Server Service Vulnerability.”

Affected configurations

NVD
Node
microsoftwindows_2000Match-sp4
OR
microsoftwindows_server_2003Match-x64
OR
microsoftwindows_server_2003Match-sp1
OR
microsoftwindows_server_2003Match-sp1-itanium
OR
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2003Match-sp2itanium
OR
microsoftwindows_server_2003Match-sp2x64
OR
microsoftwindows_server_2008Match--itanium
OR
microsoftwindows_server_2008Match--x64
OR
microsoftwindows_server_2008Match--x86
OR
microsoftwindows_vistaMatch-
OR
microsoftwindows_vistaMatch-x64
OR
microsoftwindows_vistaMatch-sp1
OR
microsoftwindows_vistaMatch-sp1-x64
OR
microsoftwindows_xpMatch--professionalx64
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3

Related

openvas 9
securityvulns 3
prion 1
cert 1
saint 4
zdt 1
checkpoint_advisories 3
cvelist 1
seebug 2
huawei 1
canvas 1
attackerkb 1
nessus 3
cve 1
ics 1
nmap 1
trendmicroblog 1
openvas
openvas
Huawei Data Communication: Remote Code Execution Vulnerability in Microsoft Windows Server Service (huawei-sa-20171129-01-windows)
2020-06-05 00:00:00
Server Service Could Allow Remote Code Execution Vulnerability (958644)
2008-10-24 00:00:00
Vulnerability in Server Service Could Allow Remote Code Execution (958644)
2008-10-30 00:00:00
securityvulns
securityvulns
Microsoft Windows code execution
2008-11-04 00:00:00
Microsoft Security Bulletin MS08-067 – Critical Vulnerability in Server Service Could Allow Remote Code Execution (958644)
2008-10-24 00:00:00
US-CERT Technical Cyber Security Alert TA08-297A -- Microsoft Windows Server Service RPC Vulnerability
2008-10-24 00:00:00
prion
prion
Design/Logic Flaw
2008-10-23 22:00:00
cert
cert
Microsoft Server service RPC stack buffer overflow vulnerability
2008-10-23 00:00:00
saint
saint
Windows Server Service buffer overflow MS08-067
2008-10-24 00:00:00
Windows Server Service buffer overflow MS08-067
2008-10-24 00:00:00
Windows Server Service buffer overflow MS08-067
2008-10-24 00:00:00
zdt
zdt
Microsoft Windows - NetAPI32.dll Code Execution (Python) (MS08-067) Exploit
2016-02-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft RPC Services Path Canonicalization Remote Code Execution (CVE-2008-4250)
2013-07-21 00:00:00
Microsoft Windows Eclipsedwing RPC Buffer Overflow (CVE-2008-4250)
2017-04-27 00:00:00
Microsoft Windows Server Service RPC Request Buffer Overflow (MS08-067; CVE-2008-4250)
2008-10-23 00:00:00
cvelist
cvelist
CVE-2008-4250
2008-10-23 21:00:00
seebug
seebug
Windows Server服务RPC请求缓冲区溢出漏洞（MS08-067）
2008-10-24 00:00:00
Windows ms08-067 缓冲区溢出漏洞
2012-10-15 00:00:00
huawei
huawei
Security Advisory - Remote Code Execution Vulnerability in Microsoft Windows Server Service
2017-11-29 00:00:00
canvas
canvas
Immunity Canvas: MS08_067
2008-10-23 22:00:00
attackerkb
attackerkb
Microsoft RPC Code Execution MS08-067
2020-04-13 00:00:00
nessus
nessus
MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Remote Code Execution (958644) (ECLIPSEDWING) (uncredentialed check)
2008-10-23 00:00:00
MS08-067: Microsoft Windows Server Service Crafted RPC Request Handling Unspecified Remote Code Execution (958644) (ECLIPSEDWING)
2008-10-23 00:00:00
Windows Server 2008 Critical RCE Vulnerabilities (uncredentialed) (PCI/DSS)
2018-04-03 00:00:00
cve
cve
CVE-2008-4250
2008-10-23 22:00:01
ics
ics
Siemens Molecular Imaging Vulnerabilities
2017-08-03 12:00:00
nmap
nmap
smb-vuln-ms08-067 NSE Script
2015-10-03 06:07:49
trendmicroblog
trendmicroblog
TippingPoint Threat Intelligence and Zero-Day Coverage – Week of April 17, 2017
2017-04-21 18:23:45

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.6 High

AI Score

Confidence

High

0.975 High

EPSS

Percentile

100.0%

JSON
Related for NVD:CVE-2008-4250
openvas9securityvulns3prion1cert1saint4zdt1checkpoint_advisories3cvelist1seebug2huawei1canvas1attackerkb1nessus3cve1ics1nmap1trendmicroblog1