PT-2008-3524 · Badblue · Badblue

Publicado 2008-04-28 · Atualizado 2018-10-11 · CVE-2008-2003

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BadBlue version 2.72 Personal Edition

Description The issue allows remote attackers to cause a denial of service and have an unknown impact via certain executable files. This can potentially be leveraged for arbitrary remote code execution.

Recommendations For BadBlue version 2.72 Personal Edition, consider restricting access to the web document root to minimize the risk of exploitation. As a temporary workaround, consider disabling the execution of uninst.exe, badblue.exe, and dyndns.exe until a patch is available. Restrict access to these executable files to prevent remote attackers from invoking them.

Correção

RCE

DoS

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-2003

Produtos afetados

Badblue

Referências · 5

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2003 · Nota
• http://securityreason.com/securityalert/3832 · Nota
• http://securityfocus.com/archive/1/491282/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42090 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2003 · Nota de Segurança