PT-2008-1804 · Foxit · Foxit Wac Server

Published 2008-01-09 · Updated 2018-10-15 · CVE-2008-0151

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Foxit WAC Server versions 2.1.0.910 and earlier Foxit WAC Server version 2.0 Build 3503 and earlier

Description The issue allows remote attackers to cause a denial of service and execute arbitrary code via a Telnet request with long options.

Recommendations For Foxit WAC Server versions 2.1.0.910 and earlier, update to a version later than 2.1.0.910 to resolve the issue. For Foxit WAC Server version 2.0 Build 3503 and earlier, update to a version later than 2.0 Build 3503 to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-0151

Affected Products

Foxit Wac Server

References · 10

• 🔥 http://securityfocus.com/bid/27142 · Exploit
• 🔥 https://exploit-db.com/exploits/30990 · Exploit
• http://secunia.com/advisories/28272 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-0151 · Security Note
• http://aluigi.altervista.org/adv/wachof-adv.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39427 · Note
• http://aluigi.altervista.org/adv/waccaz-adv.txt · Note
• http://securityfocus.com/archive/1/485812/100/0/threaded · Note
• http://securityfocus.com/archive/1/488366/100/200/threaded · Note
• http://securityreason.com/securityalert/3525 · Note