Vulnerability Description
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc Corporation | Alphastor | 3.1_sp1 |
Related Weaknesses (CWE)
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702
- http://secunia.com/advisories/30410Vendor Advisory
- http://securitytracker.com/id?1020115
- http://www.securityfocus.com/bid/29399
- http://www.vupen.com/english/advisories/2008/1670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42669
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=702
- http://secunia.com/advisories/30410Vendor Advisory
- http://securitytracker.com/id?1020115
- http://www.securityfocus.com/bid/29399
- http://www.vupen.com/english/advisories/2008/1670
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42669
FAQ
What is CVE-2008-2158?
CVE-2008-2158 is a vulnerability with a CVSS score of 10.0 (HIGH). Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP pa...
How severe is CVE-2008-2158?
CVE-2008-2158 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-2158?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Corporation Alphastor.