Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-1771
HistoryApr 16, 2008 - 12:00 a.m.

CVE-2008-1771

2008-04-1600:00:00
ubuntu.com
ubuntu.com
7

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

94.0%

Integer overflow in the ws_getpostvars function in Firefly Media Server
(formerly mt-daapd) 0.2.4.1 (0.9~r1696-1.2 on Debian) allows remote
attackers to cause a denial of service (crash) and possibly execute
arbitrary code via an HTTP POST request with a large Content-Length.

OSVersionArchitecturePackageVersionFilename
ubuntu8.04noarchmt-daapd< 0.9~r1696-1.1ubuntu0.1UNKNOWN

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.071 Low

EPSS

Percentile

94.0%