CVE-2008-3578 : Chi tiết

CVE-2008-3578

7.11%V4
2008-08-10
21h00 +00:00
A03-Injection
Network
2024-08-07
09h45 +00:00
CVE.org
NVD
Thông báo cho một CVE
Luôn được thông báo về mọi thay đổi đối với một CVE cụ thể.
Quản lý thông báo

Mô tả CVE

HydraIRC 0.3.164 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via a long irc:// URI.

Thông tin CVE

Điểm yếu liên quan

CWE-ID Tên điểm yếu Nguồn
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Số liệu

Số liệu Điểm Mức độ nghiêm trọng CVSS Vector Nguồn
V2 5 AV:N/AC:L/Au:N/C:N/I:N/A:P nvd@nist.gov

EPSS

EPSS là mô hình tính điểm dự đoán khả năng một lỗ hổng bị khai thác.

Điểm EPSS

Mô hình EPSS tạo ra điểm xác suất từ 0 đến 1 (0 đến 100%). Điểm càng cao, xác suất một lỗ hổng bị khai thác càng lớn.

Phân vị EPSS

Phân vị được dùng để xếp hạng CVE theo điểm EPSS. Ví dụ, một CVE ở phân vị thứ 95 theo điểm EPSS có nhiều khả năng bị khai thác hơn 95% CVE khác. Do đó, phân vị được dùng để so sánh điểm EPSS của một CVE với các CVE khác.
EPSS First.org

Thông tin khai thác

Exploit Database EDB-ID : 6201

Ngày xuất bản : 2008-08-03 22h00 +00:00
Tác giả : securfrog
EDB đã xác minh : Yes

Sản phẩm được đề cập

Cấu hình 0

Hydrairc>>Hydrairc >> Version Đến (bao gồm) 0.3.164

Hydrairc>>Hydrairc >> Version 0.3.057

Hydrairc>>Hydrairc >> Version 0.3.058

Hydrairc>>Hydrairc >> Version 0.3.059

Hydrairc>>Hydrairc >> Version 0.3.060

Hydrairc>>Hydrairc >> Version 0.3.061

Hydrairc>>Hydrairc >> Version 0.3.062

Hydrairc>>Hydrairc >> Version 0.3.063

Hydrairc>>Hydrairc >> Version 0.3.064

Hydrairc>>Hydrairc >> Version 0.3.065

Hydrairc>>Hydrairc >> Version 0.3.066

Hydrairc>>Hydrairc >> Version 0.3.067

Hydrairc>>Hydrairc >> Version 0.3.068

Hydrairc>>Hydrairc >> Version 0.3.069

Hydrairc>>Hydrairc >> Version 0.3.070

Hydrairc>>Hydrairc >> Version 0.3.071

Hydrairc>>Hydrairc >> Version 0.3.072

Hydrairc>>Hydrairc >> Version 0.3.073

Hydrairc>>Hydrairc >> Version 0.3.074

Hydrairc>>Hydrairc >> Version 0.3.075

Hydrairc>>Hydrairc >> Version 0.3.076

Hydrairc>>Hydrairc >> Version 0.3.077

Hydrairc>>Hydrairc >> Version 0.3.078

Hydrairc>>Hydrairc >> Version 0.3.079

Hydrairc>>Hydrairc >> Version 0.3.080

Hydrairc>>Hydrairc >> Version 0.3.081

Hydrairc>>Hydrairc >> Version 0.3.082

Hydrairc>>Hydrairc >> Version 0.3.083

Hydrairc>>Hydrairc >> Version 0.3.084

Hydrairc>>Hydrairc >> Version 0.3.085

Hydrairc>>Hydrairc >> Version 0.3.086

Hydrairc>>Hydrairc >> Version 0.3.087

Hydrairc>>Hydrairc >> Version 0.3.088

Hydrairc>>Hydrairc >> Version 0.3.089

Hydrairc>>Hydrairc >> Version 0.3.090

Hydrairc>>Hydrairc >> Version 0.3.091

Hydrairc>>Hydrairc >> Version 0.3.092

Hydrairc>>Hydrairc >> Version 0.3.093

Hydrairc>>Hydrairc >> Version 0.3.094

Hydrairc>>Hydrairc >> Version 0.3.095

Hydrairc>>Hydrairc >> Version 0.3.096

Hydrairc>>Hydrairc >> Version 0.3.097

Hydrairc>>Hydrairc >> Version 0.3.098

Hydrairc>>Hydrairc >> Version 0.3.099

Hydrairc>>Hydrairc >> Version 0.3.101

Hydrairc>>Hydrairc >> Version 0.3.102

Hydrairc>>Hydrairc >> Version 0.3.103

Hydrairc>>Hydrairc >> Version 0.3.104

Hydrairc>>Hydrairc >> Version 0.3.105

Hydrairc>>Hydrairc >> Version 0.3.106

Hydrairc>>Hydrairc >> Version 0.3.107

Hydrairc>>Hydrairc >> Version 0.3.108

Hydrairc>>Hydrairc >> Version 0.3.109

Hydrairc>>Hydrairc >> Version 0.3.110

Hydrairc>>Hydrairc >> Version 0.3.111

Hydrairc>>Hydrairc >> Version 0.3.112

Hydrairc>>Hydrairc >> Version 0.3.113

Hydrairc>>Hydrairc >> Version 0.3.114

Hydrairc>>Hydrairc >> Version 0.3.115

Hydrairc>>Hydrairc >> Version 0.3.116

Hydrairc>>Hydrairc >> Version 0.3.117

Hydrairc>>Hydrairc >> Version 0.3.118

Hydrairc>>Hydrairc >> Version 0.3.119

Hydrairc>>Hydrairc >> Version 0.3.120

Hydrairc>>Hydrairc >> Version 0.3.121

Hydrairc>>Hydrairc >> Version 0.3.122

Hydrairc>>Hydrairc >> Version 0.3.123

Hydrairc>>Hydrairc >> Version 0.3.124

Hydrairc>>Hydrairc >> Version 0.3.125

Hydrairc>>Hydrairc >> Version 0.3.126

Hydrairc>>Hydrairc >> Version 0.3.127

Hydrairc>>Hydrairc >> Version 0.3.128

Hydrairc>>Hydrairc >> Version 0.3.129

Hydrairc>>Hydrairc >> Version 0.3.130

Hydrairc>>Hydrairc >> Version 0.3.131

Hydrairc>>Hydrairc >> Version 0.3.132

Hydrairc>>Hydrairc >> Version 0.3.133

Hydrairc>>Hydrairc >> Version 0.3.134

Hydrairc>>Hydrairc >> Version 0.3.135

Hydrairc>>Hydrairc >> Version 0.3.136

Hydrairc>>Hydrairc >> Version 0.3.137

Hydrairc>>Hydrairc >> Version 0.3.138

Hydrairc>>Hydrairc >> Version 0.3.139

Hydrairc>>Hydrairc >> Version 0.3.140

Hydrairc>>Hydrairc >> Version 0.3.141

Hydrairc>>Hydrairc >> Version 0.3.142

Hydrairc>>Hydrairc >> Version 0.3.143

Hydrairc>>Hydrairc >> Version 0.3.144

Hydrairc>>Hydrairc >> Version 0.3.145

Hydrairc>>Hydrairc >> Version 0.3.146

Hydrairc>>Hydrairc >> Version 0.3.147

Hydrairc>>Hydrairc >> Version 0.3.148

Hydrairc>>Hydrairc >> Version 0.3.149

Hydrairc>>Hydrairc >> Version 0.3.150

Hydrairc>>Hydrairc >> Version 0.3.151

Hydrairc>>Hydrairc >> Version 0.3.152

Hydrairc>>Hydrairc >> Version 0.3.153

Hydrairc>>Hydrairc >> Version 0.3.154

Hydrairc>>Hydrairc >> Version 0.3.155

Hydrairc>>Hydrairc >> Version 0.3.156

Hydrairc>>Hydrairc >> Version 0.3.157

Hydrairc>>Hydrairc >> Version 0.3.158

Hydrairc>>Hydrairc >> Version 0.3.159

Hydrairc>>Hydrairc >> Version 0.3.160

Hydrairc>>Hydrairc >> Version 0.3.161

Hydrairc>>Hydrairc >> Version 0.3.162

Hydrairc>>Hydrairc >> Version 0.3.163

Hydrairc>>Hydrairc >> Version 0.23

Hydrairc>>Hydrairc >> Version 0.24

Hydrairc>>Hydrairc >> Version 0.25

Hydrairc>>Hydrairc >> Version 0.300

Hydrairc>>Hydrairc >> Version 0.301

Hydrairc>>Hydrairc >> Version 0.302

Hydrairc>>Hydrairc >> Version 0.303

Hydrairc>>Hydrairc >> Version 0.304

Hydrairc>>Hydrairc >> Version 0.305

Hydrairc>>Hydrairc >> Version 0.306

Hydrairc>>Hydrairc >> Version 0.307

Hydrairc>>Hydrairc >> Version 0.308

Hydrairc>>Hydrairc >> Version 0.309

Hydrairc>>Hydrairc >> Version 0.310

Hydrairc>>Hydrairc >> Version 0.311

Hydrairc>>Hydrairc >> Version 0.312

Hydrairc>>Hydrairc >> Version 0.313

Hydrairc>>Hydrairc >> Version 0.314

Hydrairc>>Hydrairc >> Version 0.315

Hydrairc>>Hydrairc >> Version 0.316

Hydrairc>>Hydrairc >> Version 0.317

Hydrairc>>Hydrairc >> Version 0.318

Hydrairc>>Hydrairc >> Version 0.319

Hydrairc>>Hydrairc >> Version 0.320

Hydrairc>>Hydrairc >> Version 0.321

Hydrairc>>Hydrairc >> Version 0.322

Hydrairc>>Hydrairc >> Version 0.323

Hydrairc>>Hydrairc >> Version 0.324

Hydrairc>>Hydrairc >> Version 0.325

Hydrairc>>Hydrairc >> Version 0.326

Hydrairc>>Hydrairc >> Version 0.327

Hydrairc>>Hydrairc >> Version 0.328

Hydrairc>>Hydrairc >> Version 0.329

Hydrairc>>Hydrairc >> Version 0.330

Hydrairc>>Hydrairc >> Version 0.331

Hydrairc>>Hydrairc >> Version 0.332

Hydrairc>>Hydrairc >> Version 0.333

Hydrairc>>Hydrairc >> Version 0.334

Hydrairc>>Hydrairc >> Version 0.335

Hydrairc>>Hydrairc >> Version 0.336

Hydrairc>>Hydrairc >> Version 0.337

Hydrairc>>Hydrairc >> Version 0.338

Hydrairc>>Hydrairc >> Version 0.339

Hydrairc>>Hydrairc >> Version 0.340

Hydrairc>>Hydrairc >> Version 0.341

Hydrairc>>Hydrairc >> Version 0.342

Hydrairc>>Hydrairc >> Version 0.343

Hydrairc>>Hydrairc >> Version 0.344

Hydrairc>>Hydrairc >> Version 0.345

Hydrairc>>Hydrairc >> Version 0.346

Hydrairc>>Hydrairc >> Version 0.347

Hydrairc>>Hydrairc >> Version 0.348

Hydrairc>>Hydrairc >> Version 0.349

Hydrairc>>Hydrairc >> Version 0.350

Hydrairc>>Hydrairc >> Version 0.351

Hydrairc>>Hydrairc >> Version 0.352

Hydrairc>>Hydrairc >> Version 0.353

Hydrairc>>Hydrairc >> Version 0.354

Hydrairc>>Hydrairc >> Version 0.355

Hydrairc>>Hydrairc >> Version 0.356

Tài liệu tham khảo

http://www.vupen.com/english/advisories/2008/2309
Tags : vdb-entry, x_refsource_VUPEN
https://www.exploit-db.com/exploits/6201
Tags : exploit, x_refsource_EXPLOIT-DB
http://secunia.com/advisories/31376
Tags : third-party-advisory, x_refsource_SECUNIA
http://securityreason.com/securityalert/4126
Tags : third-party-advisory, x_refsource_SREASON
http://www.securityfocus.com/bid/30523
Tags : vdb-entry, x_refsource_BID
Thông tin trình bày trên CVE Find đến từ nhiều nguồn tham chiếu được chọn lọc cẩn thận. Dữ liệu CVE được cung cấp bởi MITRE Corporation và Cơ sở dữ liệu lỗ hổng quốc gia (NVD). Danh mục lỗ hổng đã bị khai thác đã biết (KEV) có nguồn từ Cơ quan An ninh mạng và Cơ sở hạ tầng (CISA), trong khi điểm EPSS đến từ FIRST.org. Ngoài ra, dữ liệu về điểm yếu phần mềm (CWE) và mẫu tấn công phổ biến (CAPEC) được duy trì bởi MITRE Corporation, và thông tin về cấu hình phần cứng và phần mềm (CPE) được cung cấp bởi NVD.