5

CVE-2008-1648

Exploit
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers.  NOTE: some of these details are obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sympa ≫ Sympa Version 0.001
Sympa ≫ Sympa Version 0.002
Sympa ≫ Sympa Version 0.003
Sympa ≫ Sympa Version 0.004
Sympa ≫ Sympa Version 0.005
Sympa ≫ Sympa Version 0.006
Sympa ≫ Sympa Version 0.007
Sympa ≫ Sympa Version 0.008
Sympa ≫ Sympa Version 0.009
Sympa ≫ Sympa Version 0.010
Sympa ≫ Sympa Version 0.011
Sympa ≫ Sympa Version 1.2.0
Sympa ≫ Sympa Version 1.2.1
Sympa ≫ Sympa Version 1.2.2
Sympa ≫ Sympa Version 1.3.0
Sympa ≫ Sympa Version 1.3.1
Sympa ≫ Sympa Version 1.3.1-2
Sympa ≫ Sympa Version 1.3.2
Sympa ≫ Sympa Version 1.3.3
Sympa ≫ Sympa Version 1.3.4
Sympa ≫ Sympa Version 1.3.4-1
Sympa ≫ Sympa Version 1.4.0
Sympa ≫ Sympa Version 1.4.2
Sympa ≫ Sympa Version 1.4.2-1
Sympa ≫ Sympa Version 1.5
Sympa ≫ Sympa Version 2.2.1b
Sympa ≫ Sympa Version 2.2.2b
Sympa ≫ Sympa Version 2.2.3b
Sympa ≫ Sympa Version 2.2.4
Sympa ≫ Sympa Version 2.2.5
Sympa ≫ Sympa Version 2.2.6
Sympa ≫ Sympa Version 2.2.7
Sympa ≫ Sympa Version 2.2b
Sympa ≫ Sympa Version 2.3.0
Sympa ≫ Sympa Version 2.3.1
Sympa ≫ Sympa Version 2.3.2
Sympa ≫ Sympa Version 2.3.3
Sympa ≫ Sympa Version 2.3.4
Sympa ≫ Sympa Version 2.3beta
Sympa ≫ Sympa Version 2.4
Sympa ≫ Sympa Version 2.5
Sympa ≫ Sympa Version 2.5.1
Sympa ≫ Sympa Version 2.5.2
Sympa ≫ Sympa Version 2.5.3b
Sympa ≫ Sympa Version 2.5.4b
Sympa ≫ Sympa Version 2.6
Sympa ≫ Sympa Version 2.6.1
Sympa ≫ Sympa Version 2.7
Sympa ≫ Sympa Version 2.7.1
Sympa ≫ Sympa Version 2.7.2
Sympa ≫ Sympa Version 2.7.3
Sympa ≫ Sympa Version 2.7a
Sympa ≫ Sympa Version 2.7b.1
Sympa ≫ Sympa Version 2.7b.2
Sympa ≫ Sympa Version 2.7b.3
Sympa ≫ Sympa Version 3.0
Sympa ≫ Sympa Version 3.0a
Sympa ≫ Sympa Version 3.0a.1
Sympa ≫ Sympa Version 3.0b.4
Sympa ≫ Sympa Version 3.0b.8
Sympa ≫ Sympa Version 3.0b.9
Sympa ≫ Sympa Version 3.1
Sympa ≫ Sympa Version 3.1.1
Sympa ≫ Sympa Version 3.1b.7
Sympa ≫ Sympa Version 3.1b.8
Sympa ≫ Sympa Version 3.1b.9
Sympa ≫ Sympa Version 3.1b.10
Sympa ≫ Sympa Version 3.1b.12
Sympa ≫ Sympa Version 3.1b.13
Sympa ≫ Sympa Version 3.2
Sympa ≫ Sympa Version 3.2.1
Sympa ≫ Sympa Version 3.2.2a
Sympa ≫ Sympa Version 3.3
Sympa ≫ Sympa Version 3.3.1
Sympa ≫ Sympa Version 3.3.3
Sympa ≫ Sympa Version 3.3.4b.3
Sympa ≫ Sympa Version 3.3.4b.4
Sympa ≫ Sympa Version 3.3.4b.5
Sympa ≫ Sympa Version 3.3.4b.6
Sympa ≫ Sympa Version 3.3.4b.7
Sympa ≫ Sympa Version 3.3.4b.8
Sympa ≫ Sympa Version 3.3.4b.9
Sympa ≫ Sympa Version 3.3.5
Sympa ≫ Sympa Version 3.3.6b.2
Sympa ≫ Sympa Version 3.3.6b.3
Sympa ≫ Sympa Version 3.3.6b.4
Sympa ≫ Sympa Version 3.3.6b.5
Sympa ≫ Sympa Version 3.3.6b.6
Sympa ≫ Sympa Version 3.3a-vhost.10
Sympa ≫ Sympa Version 3.3b.3
Sympa ≫ Sympa Version 3.3b.4
Sympa ≫ Sympa Version 3.4
Sympa ≫ Sympa Version 4.0
Sympa ≫ Sympa Version 4.0.a1
Sympa ≫ Sympa Version 4.0.a3
Sympa ≫ Sympa Version 4.0.a4
Sympa ≫ Sympa Version 4.0.a5
Sympa ≫ Sympa Version 4.0.a6
Sympa ≫ Sympa Version 4.0.a7
Sympa ≫ Sympa Version 4.0.a8
Sympa ≫ Sympa Version 4.0.a9
Sympa ≫ Sympa Version 4.0.b1
Sympa ≫ Sympa Version 4.0.b2
Sympa ≫ Sympa Version 4.0.b3
Sympa ≫ Sympa Version 4.1
Sympa ≫ Sympa Version 4.2b.1
Sympa ≫ Sympa Version 4.2b.3
Sympa ≫ Sympa Version 5.0
Sympa ≫ Sympa Version 5.0a
Sympa ≫ Sympa Version 5.0a.1
Sympa ≫ Sympa Version 5.0b
Sympa ≫ Sympa Version 5.0b.1
Sympa ≫ Sympa Version 5.1
Sympa ≫ Sympa Version 5.1.2
Sympa ≫ Sympa Version 5.2
Sympa ≫ Sympa Version 5.2b
Sympa ≫ Sympa Version 5.2b2
Sympa ≫ Sympa Version 5.3
Sympa ≫ Sympa Version 5.3.2
Sympa ≫ Sympa Version 5.3a.8
Sympa ≫ Sympa Version 5.3a.9
Sympa ≫ Sympa Version 5.3a.10
Sympa ≫ Sympa Version 5.3b.1
Sympa ≫ Sympa Version 5.3b.3
Sympa ≫ Sympa Version 5.3b.4
Sympa ≫ Sympa Version 5.3b.5
Sympa ≫ Sympa Version 5.4a.2
Sympa ≫ Sympa Version 5.4a.4
Sympa ≫ Sympa Version 5.4b.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.15% 0.797
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://secunia.com/advisories/29575
Vendor Advisory
http://secunia.com/advisories/30910
http://sourcesup.cru.fr/tracker/?func=detail&group_id=23&aid=3702&atid=167
Exploit
http://www.debian.org/security/2008/dsa-1600
http://www.mandriva.com/security/advisories?name=MDVSA-2008:133
http://www.securityfocus.com/bid/28539
http://www.sympa.org/distribution/latest-stable/NEWS
http://www.vupen.com/english/advisories/2008/1080/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41561