‹ Back to list

CVE-2008-5160

Status: ModifiedMedium (5)—Exploit
Severity5Medium · CVSS 2.0
Exploitation probability3.47 %higher than 89% of CVEs
Active exploitationNonot in the CISA catalog
Public exploitAvailablePublished on Exploit-DB

Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a "204 No Content error."

CVSS

Base score
5
Version
2.0
Vector
AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days
3.47 %
Percentile among all scored CVEs
89
Score date
10/24/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Public exploits

Exploit code or detection templates are publicly available. This is not the same as confirmed active exploitation (KEV), but it raises the risk: patch with priority.

Affected technologies (1)

Myserver — Myserver

CWEs

References

Show 6 references

Raw JSON (NVD)

Show
{
  "id": "CVE-2008-5160",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-11-18T21:30:00.640",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/4609",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/27981",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.exploit-db.com/exploits/5184",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/4609",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/27981",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.exploit-db.com/exploits/5184",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in MyServer 0.8.11 allows remote attackers to cause a denial of service (daemon crash) via multiple invalid requests with the HTTP GET, DELETE, OPTIONS, and possibly other methods, related to a \"204 No Content error.\""
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad sin especificar en MyServer v0.8.11, permite a atacantes remotos provocar una denegación de servicio (caída de demonio) a través de múltiples peticiones HTTP GET, DELETE, OPTIONS,  inválidas y posiblemente con otros métodos, relacionados con un \"204 No Content error.\""
    }
  ],
  "lastModified": "2026-06-16T22:59:21.997",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:myserver:myserver:0.8.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DE5F0D87-E0D4-434E-9AA7-AF7E1AEC0999"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}