5

CVE-2008-1648

Exploit

Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers.  NOTE: some of these details are obtained from third party information.

Data is provided by the National Vulnerability Database (NVD)
SympaSympa Version0.001
SympaSympa Version0.002
SympaSympa Version0.003
SympaSympa Version0.004
SympaSympa Version0.005
SympaSympa Version0.006
SympaSympa Version0.007
SympaSympa Version0.008
SympaSympa Version0.009
SympaSympa Version0.010
SympaSympa Version0.011
SympaSympa Version1.2.0
SympaSympa Version1.2.1
SympaSympa Version1.2.2
SympaSympa Version1.3.0
SympaSympa Version1.3.1
SympaSympa Version1.3.1-2
SympaSympa Version1.3.2
SympaSympa Version1.3.3
SympaSympa Version1.3.4
SympaSympa Version1.3.4-1
SympaSympa Version1.4.0
SympaSympa Version1.4.2
SympaSympa Version1.4.2-1
SympaSympa Version1.5
SympaSympa Version2.2.1b
SympaSympa Version2.2.2b
SympaSympa Version2.2.3b
SympaSympa Version2.2.4
SympaSympa Version2.2.5
SympaSympa Version2.2.6
SympaSympa Version2.2.7
SympaSympa Version2.2b
SympaSympa Version2.3.0
SympaSympa Version2.3.1
SympaSympa Version2.3.2
SympaSympa Version2.3.3
SympaSympa Version2.3.4
SympaSympa Version2.3beta
SympaSympa Version2.4
SympaSympa Version2.5
SympaSympa Version2.5.1
SympaSympa Version2.5.2
SympaSympa Version2.5.3b
SympaSympa Version2.5.4b
SympaSympa Version2.6
SympaSympa Version2.6.1
SympaSympa Version2.7
SympaSympa Version2.7.1
SympaSympa Version2.7.2
SympaSympa Version2.7.3
SympaSympa Version2.7a
SympaSympa Version2.7b.1
SympaSympa Version2.7b.2
SympaSympa Version2.7b.3
SympaSympa Version3.0
SympaSympa Version3.0a
SympaSympa Version3.0a.1
SympaSympa Version3.0b.4
SympaSympa Version3.0b.8
SympaSympa Version3.0b.9
SympaSympa Version3.1
SympaSympa Version3.1.1
SympaSympa Version3.1b.7
SympaSympa Version3.1b.8
SympaSympa Version3.1b.9
SympaSympa Version3.1b.10
SympaSympa Version3.1b.12
SympaSympa Version3.1b.13
SympaSympa Version3.2
SympaSympa Version3.2.1
SympaSympa Version3.2.2a
SympaSympa Version3.3
SympaSympa Version3.3.1
SympaSympa Version3.3.3
SympaSympa Version3.3.4b.3
SympaSympa Version3.3.4b.4
SympaSympa Version3.3.4b.5
SympaSympa Version3.3.4b.6
SympaSympa Version3.3.4b.7
SympaSympa Version3.3.4b.8
SympaSympa Version3.3.4b.9
SympaSympa Version3.3.5
SympaSympa Version3.3.6b.2
SympaSympa Version3.3.6b.3
SympaSympa Version3.3.6b.4
SympaSympa Version3.3.6b.5
SympaSympa Version3.3.6b.6
SympaSympa Version3.3a-vhost.10
SympaSympa Version3.3b.3
SympaSympa Version3.3b.4
SympaSympa Version3.4
SympaSympa Version4.0
SympaSympa Version4.0.a1
SympaSympa Version4.0.a3
SympaSympa Version4.0.a4
SympaSympa Version4.0.a5
SympaSympa Version4.0.a6
SympaSympa Version4.0.a7
SympaSympa Version4.0.a8
SympaSympa Version4.0.a9
SympaSympa Version4.0.b1
SympaSympa Version4.0.b2
SympaSympa Version4.0.b3
SympaSympa Version4.1
SympaSympa Version4.2b.1
SympaSympa Version4.2b.3
SympaSympa Version5.0
SympaSympa Version5.0a
SympaSympa Version5.0a.1
SympaSympa Version5.0b
SympaSympa Version5.0b.1
SympaSympa Version5.1
SympaSympa Version5.1.2
SympaSympa Version5.2
SympaSympa Version5.2b
SympaSympa Version5.2b2
SympaSympa Version5.3
SympaSympa Version5.3.2
SympaSympa Version5.3a.8
SympaSympa Version5.3a.9
SympaSympa Version5.3a.10
SympaSympa Version5.3b.1
SympaSympa Version5.3b.3
SympaSympa Version5.3b.4
SympaSympa Version5.3b.5
SympaSympa Version5.4a.2
SympaSympa Version5.4a.4
SympaSympa Version5.4b.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 1.98% 0.819
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.