« Volver al listado

CVE-2008-0766

Estado: ModificadaAlta (10)—

Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a "Receive data file" LPD command. NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Brooks Internet Software — RPM Remote Print Manager EliteBrooks Internet Software — RPM Remote Print Manager Select

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-0766",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": true,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-02-13T21:00:00.000",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/28905",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/488010/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/27742",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0501",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40432",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/rpmlpdbof-adv.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/28905",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/488010/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/27742",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2008/0501",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40432",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in RpmSrvc.exe in Brooks Remote Print Manager (RPM) 4.5.1.11 and earlier (Elite and Select) for Windows allows remote attackers to execute arbitrary code via a long filename in a \"Receive data file\" LPD command.  NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer basado en pila en RpmSrvc.exe de Brooks Remote Print Manager (RPM) 4.5.1.11 y versiones anteriores (Elite and Select) para Windows permite a atacantes remotos ejecutar código de su elección a través de un nombre de fichero largo en el comando \"Receive data file\" LPD.\r\nNOTA: algunos de estos detalles han sido obtenidos a partir de la información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:50:18.593",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:brooks_internet_software:rpm_remote_print_manager_elite:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B328B5B-360E-41D3-9250-26D0C9302FD3",
              "versionEndIncluding": "4.5.1.11"
            },
            {
              "criteria": "cpe:2.3:a:brooks_internet_software:rpm_remote_print_manager_select:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7810D6D-EE7C-4652-9F3A-561DFB240D50",
              "versionEndIncluding": "4.5.1.11"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "vendorComments": [
    {
      "comment": "RPM Remote Print Manager version 4.5.1.12 resolves the issue found in this security advisory. The latest software can be downloaded from http://lpd.brooksnet.com.",
      "lastModified": "2008-02-15T00:00:00",
      "organization": "Brooks Internet Software, Inc."
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}