PT-2008-3524 · Badblue · Badblue

Published 2008-04-28 · Updated 2018-10-11 · CVE-2008-2003

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions BadBlue version 2.72 Personal Edition

Description The issue allows remote attackers to cause a denial of service and have an unknown impact via certain executable files. This can potentially be leveraged for arbitrary remote code execution.

Recommendations For BadBlue version 2.72 Personal Edition, consider restricting access to the web document root to minimize the risk of exploitation. As a temporary workaround, consider disabling the execution of uninst.exe, badblue.exe, and dyndns.exe until a patch is available. Restrict access to these executable files to prevent remote attackers from invoking them.

Fix

RCE

DoS

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2008-2003

Affected Products

Badblue

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-2003 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2003 · Note
• http://securityreason.com/securityalert/3832 · Note
• http://securityfocus.com/archive/1/491282/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42090 · Note