CVE-2008-5408

CWE-119 — Buffer Overflow4 documents4 sources
Severity
9.0CRITICAL
EPSS
5.0%
top 10.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Symantec Backup Exec FOR Windows Server
Timeline
PublishedDec 10
Latest updateMay 17

Description

Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11.0 (aka 11d) builds 6235 and 7170, 12.0 build 1364, and 12.5 build 2213 allows remote authenticated users to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors. NOTE: this can be exploited by unauthenticated remote attackers by leveraging CVE-2008-5407.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

▶NVDsymantec/backup_exec11d, 12.0, 12.5+2

Patches

Patch: securityresponse.symantec.com ↗Patch: seer.entsupport.symantec.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-rgpx-jh87-j8mr: Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11↗2022-05-17
▶
CVEList
CVE-2008-5408: Buffer overflow in the data management protocol in Symantec Backup Exec for Windows Servers 11↗2008-12-09
▶

💥Exploits & PoCs

1
Exploit-DB
LokiCMS 0.3.4 - 'writeconfig()' Remote Command Execution↗2008-10-13
▶
CVE-2008-5408 (CRITICAL CVSS 9) | Buffer overflow in the data managem | cvebase.io