« Volver al listado

CVE-2008-3169

Estado: ModificadaAlta (10)—

Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a "coordinate normalization bug." NOTE: some of these details are obtained from third party information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Empire Server — Empire Server

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-3169",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": true,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-07-14T23:41:00.000",
  "references": [
    {
      "url": "http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/30954",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/30152",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43655",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://freshmeat.net/projects/empserver/?branch_id=22267&release_id=280745",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/30954",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://sourceforge.net/project/shownotes.php?group_id=24031&release_id=600111",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/30152",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43655",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Multiple heap-based buffer overflows in Empire Server before 4.3.15 allow remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to a \"coordinate normalization bug.\" NOTE: some of these details are obtained from third party information."
    },
    {
      "lang": "es",
      "value": "Múltiples desbordamientos de búfer basados en montículo en Empire Server anterior a 4.3.15, permite a atacantes remotos provocar una denegación de servicio o puede que ejecutar código de su elección mediante vectores no especificados; esto está relacionado con un \"fallo en el normalizador de coordenadas\". NOTA: Algunos de estos detalles se han obtenido de información de terceros."
    }
  ],
  "lastModified": "2026-06-16T22:55:17.450",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A8F28D39-C0B8-4755-9458-F929560F8E3C",
              "versionEndIncluding": "4.3.11"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "97C4498A-81B5-405B-831A-AC85F47A8B72"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB374BFF-3E33-47CD-88A0-8F512397316E"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.12:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54DFEC4A-F779-4465-B5BE-0CEF8A9C1AEF"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.13:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7146C53E-C190-4FB9-95D9-D8525346CF8A"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.14:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "87A5B0F2-D726-4849-9F08-FBC137E2E201"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.15:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AC3A026C-063E-4C83-A741-33AF9DFA9879"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.16:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7A5DDFD5-4A10-42FF-B729-9C1A25B9DC18"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.17:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AE657661-98D5-499B-8DF7-6C96C27AB332"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.18:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4C9983B0-D36E-4F8D-BA8C-B7B1B12CE6DB"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.19:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5713E2CD-6375-4C90-8D66-5B4815899168"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F2FF677B-8DD6-462A-9D0A-2336941C17C7"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.21:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F93CA553-5644-4040-B406-281224E177D3"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.22:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "78C9A2B1-FFDA-4300-BFA1-CCE83CECF418"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.2.23:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4B5F23D9-2FED-4DAD-A4E0-FC0C3D3691E9"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.3.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B49FB14B-063B-41F9-A91B-EE5DD56EBDD3"
            },
            {
              "criteria": "cpe:2.3:a:empire_server:empire_server:4.3.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA8107F0-F2F2-4DCC-8A47-8A024FA67E96"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}