Details of VAR-200803-0422

ID

VAR-200803-0422

CVE

CVE-2008-1412

TITLE

plural F-Secure Service disruption in anti-virus products (DoS) Vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2008-002870

DESCRIPTION

Unspecified vulnerability in multiple F-Secure anti-virus products, including Internet Security 2006 through 2008, Anti-Virus 2006 through 2008, and others, allows remote attackers to execute arbitrary code or cause a denial of service (hang or crash) via a malformed archive that triggers an unhandled exception, as demonstrated by the PROTOS GENOME test suite for Archive Formats. Multiple F-Secure products are prone to multiple remote archive-handling vulnerabilities because the applications fails to properly handle malformed archive files. Successfully exploiting these issues allows remote attackers to trigger unhandled exceptions. Various unspecified effects (potentially including denial of service or remote code execution) are possible. The malformed archive triggers an exception that cannot be handled, such as the PROTOS GENOME test that matches the Archive format. ---------------------------------------------------------------------- A new version (0.9.0.0 - Release Candidate 1) of the free Secunia PSI has been released. The new version includes many new and advanced features, which makes it even easier to stay patched. Download and test it today: https://psi.secunia.com/ Read more about this new version: https://psi.secunia.com/?page=changelog ---------------------------------------------------------------------- TITLE: F-Secure Archives Handling Unspecified Vulnerabilities SECUNIA ADVISORY ID: SA29397 VERIFY ADVISORY: http://secunia.com/advisories/29397/ CRITICAL: Highly critical IMPACT: DoS, System access WHERE: >From remote OPERATING SYSTEM: F-Secure Messaging Security Gateway X-Series http://secunia.com/product/8997/ F-Secure Messaging Security Gateway P-Series http://secunia.com/product/8998/ SOFTWARE: F-Secure Internet Security 2006 http://secunia.com/product/6883/ F-Secure Internet Security 2007 http://secunia.com/product/14375/ F-Secure Internet Security 2008 http://secunia.com/product/17555/ F-Secure Anti-Virus 2006 http://secunia.com/product/6882/ F-Secure Anti-Virus 2007 http://secunia.com/product/14374/ F-Secure Anti-Virus 2008 http://secunia.com/product/17554/ F-Secure Anti-Virus Client Security 7.x http://secunia.com/product/14381/ F-Secure Anti-Virus Client Security 6.x http://secunia.com/product/5786/ F-Secure Anti-Virus for Workstations 7.x http://secunia.com/product/14226/ F-Secure Anti-Virus Linux Client Security 5.x http://secunia.com/product/14377/ F-Secure Anti-Virus for Linux 4.x http://secunia.com/product/3165/ F-Secure Anti-Virus for Windows Servers 7.x http://secunia.com/product/14382/ F-Secure Anti-Virus for Windows Servers 5.x http://secunia.com/product/452/ F-Secure Anti-Virus Client Security 5.x http://secunia.com/product/2718/ F-Secure Anti-Virus for Workstations 5.x http://secunia.com/product/457/ F-Secure Anti-Virus for Citrix Servers 5.x http://secunia.com/product/5198/ F-Secure Anti-Virus Linux Server Security 5.x http://secunia.com/product/14376/ F-Secure Anti-Virus for Microsoft Exchange 7.x http://secunia.com/product/14551/ F-Secure Anti-Virus for Microsoft Exchange 6.x http://secunia.com/product/454/ F-Secure Internet Gatekeeper 6.x http://secunia.com/product/3339/ F-Secure Internet Gatekeeper for Linux 2.x http://secunia.com/product/4635/ F-Secure Anti-Virus for MIMEsweeper 5.x http://secunia.com/product/455/ DESCRIPTION: Some vulnerabilities have been reported in various F-Secure products, which can be exploited by malicious people to cause a DoS (Denial of Service) or to potentially compromise a vulnerable system. The vulnerabilities are caused due to unspecified errors within the handling of archives. The vulnerabilities affect the following products: * F-Secure Internet Security 2006, 2007, 2007 Second Edition, and 2008 * F-Secure Anti-Virus 2006, 2007, 2007 Second Edition, and 2008 * F-Secure Client Security 7.11 and earlier * F-Secure Anti-Virus Client Security 6.04 and earlier * F-Secure Anti-Virus for Workstations 7.11 and earlier * F-Secure Anti-Virus Linux Client Security 5.54 and earlier * F-Secure Anti-Virus for Linux 4.65 and earlier * Solutions based on F-Secure Protection Service for Consumers version 7.00 and earlier * Solutions based on F-Secure Protection Service for Business version 3.10 and earlier * F-Secure Mobile Anti-Virus\x99 for S60 2nd edition * F-Secure Mobile Anti-Virus\x99 for Windows Mobile 2003/5.0/6 * F-Secure Mobile Security\x99 for Series 80 * F-Secure Anti-Virus for Windows Servers 7.01 and earlier * F-Secure Anti-Virus for Citrix Servers 7.00 and earlier * F-Secure Anti-Virus Linux Server Security 5.54 and earlier * F-Secure Anti-Virus for Microsoft Exchange 7.10 and earlier * F-Secure Internet Gatekeeper 6.61, Windows and earlier * F-Secure Internet Gatekeeper for Linux 2.16 and earlier * F-Secure Anti-Virus for MIMEsweeper 5.61 and earlier * F-Secure Messaging Security Gateway 4.0.7 and earlier SOLUTION: Apply patches. Please see the vendor's advisory for details. PROVIDED AND/OR DISCOVERED BY: The vendor credits University of Oulu. ORIGINAL ADVISORY: http://www.f-secure.com/security/fsc-2008-2.shtml ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 2.16

sources: NVD: CVE-2008-1412 // JVNDB: JVNDB-2008-002870 // BID: 28282 // VULHUB: VHN-31537 // VULMON: CVE-2008-1412 // PACKETSTORM: 64615

AFFECTED PRODUCTS

vendor:	f secure	model:	f-secure mobile antivirus for windows mobile	scope:	eq	version:	6	Trust: 1.6
vendor:	f secure	model:	f-secure mobile antivirus for windows mobile	scope:	eq	version:	5.0	Trust: 1.6
vendor:	f secure	model:	f-secure mobile antivirus for s60	scope:	eq	version:	2nd_edition	Trust: 1.0
vendor:	f secure	model:	f-secure mobile antivirus for windows mobile	scope:	eq	version:	2003	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus client security	scope:	lte	version:	6.04	Trust: 1.0
vendor:	f secure	model:	f-secure client security	scope:	lte	version:	7.11	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus linux client security	scope:	lte	version:	5.54	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	2008	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus for workstations	scope:	lte	version:	7.11	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus for linux	scope:	lte	version:	4.65	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	2006	Trust: 1.0
vendor:	f secure	model:	f-secure internet security	scope:	eq	version:	2006	Trust: 1.0
vendor:	f secure	model:	f-secure internet security	scope:	eq	version:	2008	Trust: 1.0
vendor:	f secure	model:	f-secure mobile security for series 80	scope:	eq	version:	*	Trust: 1.0
vendor:	f secure	model:	f-secure protection service for business	scope:	lte	version:	3.10	Trust: 1.0
vendor:	f secure	model:	f-secure protection service for consumers	scope:	lte	version:	7.00	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	2007	Trust: 1.0
vendor:	f secure	model:	f-secure internet security	scope:	eq	version:	2007	Trust: 1.0
vendor:	f secure	model:	f-secure anti-virus	scope:	eq	version:	2006 to 2008	Trust: 0.8
vendor:	f secure	model:	f-secure internet security	scope:	eq	version:	2006 to 2008	Trust: 0.8
vendor:	f secure	model:	f-secure anti-virus client security	scope:	eq	version:	6.04	Trust: 0.6
vendor:	f secure	model:	f-secure mobile security for series 80	scope:	-	version:	-	Trust: 0.6
vendor:	f secure	model:	f-secure anti-virus for workstations	scope:	eq	version:	7.11	Trust: 0.6
vendor:	f secure	model:	f-secure anti-virus for linux	scope:	eq	version:	4.65	Trust: 0.6
vendor:	f secure	model:	f-secure protection service for business	scope:	eq	version:	3.10	Trust: 0.6
vendor:	f secure	model:	f-secure protection service for consumers	scope:	eq	version:	7.00	Trust: 0.6
vendor:	f secure	model:	f-secure client security	scope:	eq	version:	7.11	Trust: 0.6
vendor:	f secure	model:	f-secure anti-virus linux client security	scope:	eq	version:	5.54	Trust: 0.6
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	4.64	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.60	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	2.16	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.11	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	-	version:	-	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.41	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.50	Trust: 0.3
vendor:	f secure	model:	anti-virus for citrix servers	scope:	eq	version:	5.52	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.54	Trust: 0.3
vendor:	f secure	model:	protection service for business	scope:	eq	version:	3.10	Trust: 0.3
vendor:	f secure	model:	anti-virus second edition	scope:	eq	version:	2007	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	4.65	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	5.50	Trust: 0.3
vendor:	f secure	model:	anti-virus for mimesweeper	scope:	eq	version:	5.42	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.2	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	5.43	Trust: 0.3
vendor:	f secure	model:	anti-virus	scope:	eq	version:	2008	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux servers	scope:	eq	version:	4.64	Trust: 0.3
vendor:	f secure	model:	anti-virus for citrix servers	scope:	eq	version:	7.00	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	4.61	Trust: 0.3
vendor:	f secure	model:	anti-virus for mimesweeper	scope:	eq	version:	5.61	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.61	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.0.4	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	6.04	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.40	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.32	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	6.02	Trust: 0.3
vendor:	f secure	model:	client security	scope:	eq	version:	7.11	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper for linux	scope:	eq	version:	2.16	Trust: 0.3
vendor:	f secure	model:	internet security	scope:	eq	version:	2008	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper for linux	scope:	-	version:	-	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper for linux	scope:	eq	version:	2.14	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.30	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	7.11	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux	scope:	eq	version:	4.52	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.0	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.31	Trust: 0.3
vendor:	f secure	model:	protection service for consumers	scope:	eq	version:	0	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.60	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	4.51	Trust: 0.3
vendor:	f secure	model:	mobile anti-virus for s60 2nd edition	scope:	eq	version:	0	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	5.40	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	5.41	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.42	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux servers	scope:	eq	version:	4.65	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	7.11	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	7.10	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	6.03	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux servers	scope:	eq	version:	4.61	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.62	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	7.00	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.01	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper for linux	scope:	eq	version:	2.06	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.400	Trust: 0.3
vendor:	f secure	model:	client security	scope:	eq	version:	0	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.52	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	5.44	Trust: 0.3
vendor:	f secure	model:	anti-virus for mimesweeper	scope:	eq	version:	5.50	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux servers	scope:	eq	version:	4.51	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	5.54	Trust: 0.3
vendor:	f secure	model:	anti-virus	scope:	eq	version:	2007	Trust: 0.3
vendor:	f secure	model:	protection service for business	scope:	eq	version:	0	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper	scope:	eq	version:	6.3	Trust: 0.3
vendor:	f secure	model:	anti-virus for mimesweeper	scope:	eq	version:	5.41	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.61	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	5.52	Trust: 0.3
vendor:	f secure	model:	internet security second edition	scope:	eq	version:	2007	Trust: 0.3
vendor:	f secure	model:	internet security	scope:	eq	version:	20060	Trust: 0.3
vendor:	f secure	model:	messaging security gateway	scope:	eq	version:	4.0.6	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.21	Trust: 0.3
vendor:	f secure	model:	messaging security gateway	scope:	eq	version:	4.0.7	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange	scope:	eq	version:	6.31	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux	scope:	eq	version:	4.5	Trust: 0.3
vendor:	f secure	model:	protection service for consumers	scope:	eq	version:	7.00	Trust: 0.3
vendor:	f secure	model:	mobile security for series	scope:	eq	version:	800	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.01	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	7.00	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux gateways	scope:	eq	version:	4.52	Trust: 0.3
vendor:	f secure	model:	anti-virus for linux servers	scope:	eq	version:	4.52	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	5.55	Trust: 0.3
vendor:	f secure	model:	mobile anti-virus for windows mobile	scope:	eq	version:	2003/5.0/60	Trust: 0.3
vendor:	f secure	model:	anti-virus for ms exchange service release	scope:	eq	version:	6.301	Trust: 0.3
vendor:	f secure	model:	anti-virus	scope:	eq	version:	20060	Trust: 0.3
vendor:	f secure	model:	anti-virus client security	scope:	eq	version:	6.01	Trust: 0.3
vendor:	f secure	model:	anti-virus linux client security	scope:	eq	version:	5.30	Trust: 0.3
vendor:	f secure	model:	anti-virus for citrix servers	scope:	eq	version:	5.5	Trust: 0.3
vendor:	f secure	model:	anti-virus for workstations	scope:	eq	version:	5.42	Trust: 0.3
vendor:	f secure	model:	internet security	scope:	eq	version:	20070	Trust: 0.3
vendor:	f secure	model:	anti-virus for mimesweeper	scope:	eq	version:	5.51	Trust: 0.3
vendor:	f secure	model:	internet gatekeeper for linux	scope:	eq	version:	2.15.484	Trust: 0.3

sources: BID: 28282 // JVNDB: JVNDB-2008-002870 // CNNVD: CNNVD-200803-344 // NVD: CVE-2008-1412

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2008-1412
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2008-1412
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-200803-344
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-31537
value:	MEDIUM
Trust: 0.1
VULMON:	CVE-2008-1412
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2008-1412
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.9
VULHUB:	VHN-31537
severity:	MEDIUM
baseScore:	6.8
vectorString:	AV:N/AC:M/AU:N/C:P/I:P/A:P
accessVector:	NETWORK
accessComplexity:	MEDIUM
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	PARTIAL
exploitabilityScore:	8.6
impactScore:	6.4
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

sources: VULHUB: VHN-31537 // VULMON: CVE-2008-1412 // JVNDB: JVNDB-2008-002870 // CNNVD: CNNVD-200803-344 // NVD: CVE-2008-1412

PROBLEMTYPE DATA

problemtype:	CWE-20	Trust: 1.9
problemtype:	NVD-CWE-noinfo	Trust: 1.0

sources: VULHUB: VHN-31537 // JVNDB: JVNDB-2008-002870 // NVD: CVE-2008-1412

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200803-344

TYPE

input validation

Trust: 0.6

sources: CNNVD: CNNVD-200803-344

CONFIGURATIONS

sources: JVNDB: JVNDB-2008-002870

PATCH

title:	Security advisories	url:	http://www.f-secure.com/en/web/labs_global/security-advisories	Trust: 0.8
title:	RADAMSA	url:	https://github.com/StephenHaruna/RADAMSA	Trust: 0.1
title:	radamsa	url:	https://github.com/Hwangtaewon/radamsa	Trust: 0.1
title:	radamsa-Fuzzer	url:	https://github.com/sunzu94/radamsa-Fuzzer	Trust: 0.1
title:	radamsa	url:	https://github.com/benoit-a/radamsa	Trust: 0.1

sources: VULMON: CVE-2008-1412 // JVNDB: JVNDB-2008-002870

EXTERNAL IDS

db:	NVD	id:	CVE-2008-1412	Trust: 2.9
db:	BID	id:	28282	Trust: 2.1
db:	SECUNIA	id:	29397	Trust: 1.9
db:	VUPEN	id:	ADV-2008-0903	Trust: 1.7
db:	SECTRACK	id:	1019618	Trust: 1.7
db:	SECTRACK	id:	1019619	Trust: 1.7
db:	SECTRACK	id:	1019620	Trust: 1.7
db:	JVNDB	id:	JVNDB-2008-002870	Trust: 0.8
db:	CNNVD	id:	CNNVD-200803-344	Trust: 0.7
db:	XF	id:	41234	Trust: 0.6
db:	VULHUB	id:	VHN-31537	Trust: 0.1
db:	VUPEN	id:	2008/0903	Trust: 0.1
db:	VULMON	id:	CVE-2008-1412	Trust: 0.1
db:	PACKETSTORM	id:	64615	Trust: 0.1

sources: VULHUB: VHN-31537 // VULMON: CVE-2008-1412 // BID: 28282 // JVNDB: JVNDB-2008-002870 // PACKETSTORM: 64615 // CNNVD: CNNVD-200803-344 // NVD: CVE-2008-1412

REFERENCES

url:	http://www.f-secure.com/security/fsc-2008-2.shtml	Trust: 2.2
url:	http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-cs-hotfixes.shtml	Trust: 2.1
url:	http://support.f-secure.com/enu/corporate/downloads/hotfixes/av-mimesweeper-hotfixes.shtml	Trust: 2.1
url:	http://www.cert.fi/haavoittuvuudet/joint-advisory-archive-formats.html	Trust: 2.1
url:	http://www.ee.oulu.fi/research/ouspg/protos/testing/c10/archive/	Trust: 2.1
url:	http://www.securityfocus.com/bid/28282	Trust: 1.8
url:	http://www.securitytracker.com/id?1019618	Trust: 1.8
url:	http://www.securitytracker.com/id?1019619	Trust: 1.8
url:	http://www.securitytracker.com/id?1019620	Trust: 1.8
url:	http://secunia.com/advisories/29397	Trust: 1.8
url:	http://www.vupen.com/english/advisories/2008/0903/references	Trust: 1.2
url:	https://exchange.xforce.ibmcloud.com/vulnerabilities/41234	Trust: 1.2
url:	http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2008-1412	Trust: 0.8
url:	http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2008-1412	Trust: 0.8
url:	http://www.frsirt.com/english/advisories/2008/0903/references	Trust: 0.6
url:	http://xforce.iss.net/xforce/xfdb/41234	Trust: 0.6
url:	http://www.f-secure.com/cs/	Trust: 0.3
url:	http://www.f-secure.com/products/anti-virus/linux/	Trust: 0.3
url:	https://cwe.mitre.org/data/definitions/20.html	Trust: 0.1
url:	https://cwe.mitre.org/data/definitions/.html	Trust: 0.1
url:	https://nvd.nist.gov	Trust: 0.1
url:	https://github.com/stephenharuna/radamsa	Trust: 0.1
url:	http://secunia.com/product/457/	Trust: 0.1
url:	http://secunia.com/product/454/	Trust: 0.1
url:	http://secunia.com/advisories/29397/	Trust: 0.1
url:	http://secunia.com/product/2718/	Trust: 0.1
url:	http://secunia.com/product/455/	Trust: 0.1
url:	http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org	Trust: 0.1
url:	http://secunia.com/product/14377/	Trust: 0.1
url:	http://secunia.com/product/452/	Trust: 0.1
url:	http://secunia.com/product/6883/	Trust: 0.1
url:	http://secunia.com/product/5786/	Trust: 0.1
url:	https://psi.secunia.com/?page=changelog	Trust: 0.1
url:	http://secunia.com/product/14382/	Trust: 0.1
url:	http://secunia.com/product/3339/	Trust: 0.1
url:	http://secunia.com/about_secunia_advisories/	Trust: 0.1
url:	http://secunia.com/product/17554/	Trust: 0.1
url:	http://secunia.com/product/5198/	Trust: 0.1
url:	https://psi.secunia.com/	Trust: 0.1
url:	http://secunia.com/product/8997/	Trust: 0.1
url:	http://secunia.com/product/14374/	Trust: 0.1
url:	http://secunia.com/product/17555/	Trust: 0.1
url:	http://secunia.com/secunia_security_advisories/	Trust: 0.1
url:	http://secunia.com/product/6882/	Trust: 0.1
url:	http://secunia.com/product/8998/	Trust: 0.1
url:	http://secunia.com/product/14376/	Trust: 0.1
url:	http://secunia.com/product/14375/	Trust: 0.1
url:	http://secunia.com/product/3165/	Trust: 0.1
url:	http://secunia.com/product/4635/	Trust: 0.1
url:	http://secunia.com/product/14226/	Trust: 0.1
url:	http://secunia.com/product/14381/	Trust: 0.1
url:	http://secunia.com/product/14551/	Trust: 0.1

sources: VULHUB: VHN-31537 // VULMON: CVE-2008-1412 // BID: 28282 // JVNDB: JVNDB-2008-002870 // PACKETSTORM: 64615 // CNNVD: CNNVD-200803-344 // NVD: CVE-2008-1412

CREDITS

The vendor credits the University of Oulu for discovering these issues.

Trust: 0.9

sources: BID: 28282 // CNNVD: CNNVD-200803-344

SOURCES

db:	VULHUB	id:	VHN-31537
db:	VULMON	id:	CVE-2008-1412
db:	BID	id:	28282
db:	JVNDB	id:	JVNDB-2008-002870
db:	PACKETSTORM	id:	64615
db:	CNNVD	id:	CNNVD-200803-344
db:	NVD	id:	CVE-2008-1412

LAST UPDATE DATE

2025-04-10T23:07:15.870000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-31537	date:	2017-08-08T00:00:00
db:	VULMON	id:	CVE-2008-1412	date:	2017-08-08T00:00:00
db:	BID	id:	28282	date:	2015-05-07T17:32:00
db:	JVNDB	id:	JVNDB-2008-002870	date:	2012-06-26T00:00:00
db:	CNNVD	id:	CNNVD-200803-344	date:	2008-09-05T00:00:00
db:	NVD	id:	CVE-2008-1412	date:	2025-04-09T00:30:58.490

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-31537	date:	2008-03-20T00:00:00
db:	VULMON	id:	CVE-2008-1412	date:	2008-03-20T00:00:00
db:	BID	id:	28282	date:	2008-03-17T00:00:00
db:	JVNDB	id:	JVNDB-2008-002870	date:	2012-06-26T00:00:00
db:	PACKETSTORM	id:	64615	date:	2008-03-17T18:28:30
db:	CNNVD	id:	CNNVD-200803-344	date:	2008-03-20T00:00:00
db:	NVD	id:	CVE-2008-1412	date:	2008-03-20T10:44:00