Sign-up

ID

VAR-200802-0083


CVE

CVE-2008-0944


TITLE

Ipswitch IM Service disruption in (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2008-004152

DESCRIPTION

Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero. Ipswitch Instant Messaging is prone to multiple security vulnerabilities, including a denial-of-service vulnerability, a format-string vulnerability, and a vulnerability that allows attackers to overwrite arbitrary files. Attackers can exploit these issues to execute arbitrary code, cause denial-of-service conditions, or overwrite files with arbitrary content. These issues affect Ipswitch Instant Messaging 2.0.8.1; other versions may also be affected. Ipswitch Instant Messaging (IM) has a denial of service vulnerability. ---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: Ipswitch Instant Messaging IMServer Denial of Service SECUNIA ADVISORY ID: SA28824 VERIFY ADVISORY: http://secunia.com/advisories/28824/ CRITICAL: Moderately critical IMPACT: DoS WHERE: >From remote SOFTWARE: Ipswitch Instant Messaging 2.x http://secunia.com/product/14854/ Ipswitch Collaboration Suite (ICS) 2.x http://secunia.com/product/5167/ DESCRIPTION: Luigi Auriemma has discovered a vulnerability in Ipswitch Instant Messaging, which can be exploited by malicious people to cause a DoS (Denial of Service). The vulnerability is caused due to an error in the IMServer service (IMServer.exe) and can be exploited to crash the service via a specially crafted packet sent to default port 5177/TCP. NOTE: Other errors have also been reported e.g. a format-string error in the logging function. The vulnerability is confirmed in version 2.08 and is also reported to affect the IM clients. SOLUTION: Use in a trusted network environment only. PROVIDED AND/OR DISCOVERED BY: Luigi Auriemma ORIGINAL ADVISORY: http://aluigi.altervista.org/adv/ipsimene-adv.txt ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.07

sources: NVD: CVE-2008-0944 // JVNDB: JVNDB-2008-004152 // BID: 27677 // VULHUB: VHN-31069 // PACKETSTORM: 63425

AFFECTED PRODUCTS

vendor:ipswitchmodel:instant messagingscope:eqversion:2.0.8.1

Trust: 1.9

vendor:ipswitchmodel:instant messagingscope:lteversion:2.0.8.1

Trust: 0.8

sources: BID: 27677 // JVNDB: JVNDB-2008-004152 // CNNVD: CNNVD-200802-452 // NVD: CVE-2008-0944

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2008-0944
value: MEDIUM

Trust: 1.0

NVD: CVE-2008-0944
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-200802-452
value: MEDIUM

Trust: 0.6

VULHUB: VHN-31069
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2008-0944
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-31069
severity: MEDIUM
baseScore: 5.0
vectorString: AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: NONE
availabilityImpact: NONE
exploitabilityScore: 10.0
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-31069 // JVNDB: JVNDB-2008-004152 // CNNVD: CNNVD-200802-452 // NVD: CVE-2008-0944

PROBLEMTYPE DATA

problemtype:CWE-189

Trust: 1.9

sources: VULHUB: VHN-31069 // JVNDB: JVNDB-2008-004152 // NVD: CVE-2008-0944

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200802-452

TYPE

digital error

Trust: 0.6

sources: CNNVD: CNNVD-200802-452

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2008-004152

EXPLOIT AVAILABILITY
sources:
            
            
            VULHUB: VHN-31069

PATCH
title:Instant Messagingurl:http://www.imailserver.com/products/ipswitch-instant-messaging/
Trust: 0.8
sources:
            
            
            JVNDB: JVNDB-2008-004152

EXTERNAL IDS
db:NVDid:CVE-2008-0944
Trust: 2.8
db:BIDid:27677
Trust: 2.0
db:SECUNIAid:28824
Trust: 1.8
db:SREASONid:3697
Trust: 1.7
db:JVNDBid:JVNDB-2008-004152
Trust: 0.8
db:BUGTRAQid:20080207 MULTIPLE VULNERABILITIES IN IPSWITCH INSTANT MESSAGING 2.0.8.1
Trust: 0.6
db:CNNVDid:CNNVD-200802-452
Trust: 0.6
db:EXPLOIT-DBid:31122
Trust: 0.1
db:VULHUBid:VHN-31069
Trust: 0.1
db:PACKETSTORMid:63425
Trust: 0.1
sources:
            
            
            VULHUB: VHN-31069 // 
            
            
            
            BID: 27677 // 
            
            
            
            JVNDB: JVNDB-2008-004152 // 
            
            
            
            PACKETSTORM: 63425 // 
            
            
            
            CNNVD: CNNVD-200802-452 // 
            
            
            
            NVD: CVE-2008-0944

REFERENCES
url:http://aluigi.altervista.org/adv/ipsimene-adv.txt
Trust: 1.8
url:http://www.securityfocus.com/bid/27677
Trust: 1.7
url:http://secunia.com/advisories/28824
Trust: 1.7
url:http://securityreason.com/securityalert/3697
Trust: 1.7
url:http://www.securityfocus.com/archive/1/487748/100/200/threaded
Trust: 1.1
url:http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-0944
Trust: 0.8
url:http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-0944
Trust: 0.8
url:http://www.securityfocus.com/archive/1/archive/1/487748/100/200/threaded
Trust: 0.6
url:http://www.ipswitch.com/products/instant_messaging
Trust: 0.3
url:/archive/1/487748
Trust: 0.3
url:http://secunia.com/secunia_security_advisories/
Trust: 0.1
url:https://psi.secunia.com/?page=changelog
Trust: 0.1
url:https://psi.secunia.com/
Trust: 0.1
url:http://secunia.com/advisories/28824/
Trust: 0.1
url:http://secunia.com/product/14854/
Trust: 0.1
url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Trust: 0.1
url:http://secunia.com/product/5167/
Trust: 0.1
url:http://secunia.com/about_secunia_advisories/
Trust: 0.1
sources:
            
            
            VULHUB: VHN-31069 // 
            
            
            
            BID: 27677 // 
            
            
            
            JVNDB: JVNDB-2008-004152 // 
            
            
            
            PACKETSTORM: 63425 // 
            
            
            
            CNNVD: CNNVD-200802-452 // 
            
            
            
            NVD: CVE-2008-0944

CREDITS
Luigi Auriemma is credited with discovering these vulnerabilities.
Trust: 0.3
sources:
            
            
            BID: 27677

SOURCES
db:VULHUBid:VHN-31069
db:BIDid:27677
db:JVNDBid:JVNDB-2008-004152
db:PACKETSTORMid:63425
db:CNNVDid:CNNVD-200802-452
db:NVDid:CVE-2008-0944

LAST UPDATE DATE
2025-04-10T22:57:19.843000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-31069date:2018-10-15T00:00:00
db:BIDid:27677date:2016-07-06T14:17:00
db:JVNDBid:JVNDB-2008-004152date:2012-09-25T00:00:00
db:CNNVDid:CNNVD-200802-452date:2008-09-05T00:00:00
db:NVDid:CVE-2008-0944date:2025-04-09T00:30:58.490

SOURCES RELEASE DATE
db:VULHUBid:VHN-31069date:2008-02-25T00:00:00
db:BIDid:27677date:2008-02-07T00:00:00
db:JVNDBid:JVNDB-2008-004152date:2012-09-25T00:00:00
db:PACKETSTORMid:63425date:2008-02-09T00:15:54
db:CNNVDid:CNNVD-200802-452date:2008-02-25T00:00:00
db:NVDid:CVE-2008-0944date:2008-02-25T21:44:00