PT-2008-2871 · Acronis · Acronis True Image Enterprise Server+1

Luigi Auriemma · Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1279

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Acronis True Image Group Server versions 1.5.19.191 and earlier Acronis True Image Enterprise Server version 9.5.0.8072 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by sending a packet with an invalid length field. This invalid field causes an out-of-bounds read.

Recommendations For Acronis True Image Group Server versions 1.5.19.191 and earlier, update to a version later than 1.5.19.191 to resolve the issue. For Acronis True Image Enterprise Server version 9.5.0.8072 and earlier, update to a version later than 9.5.0.8072 to resolve the issue.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-1279

Affected Products

Acronis True Image Enterprise Server

Acronis True Image Group Server

References · 7

• http://secunia.com/advisories/29306 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1279 · Security Note
• http://securityfocus.com/archive/1/489353/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41071 · Note
• http://securityfocus.com/bid/28169 · Note
• http://vupen.com/english/advisories/2008/0813/references · Note
• http://aluigi.altervista.org/adv/acrogroup-adv.txt · Note