Lumension® Endpoint Intelligence Center

Intelligence Center » Browse All Vulnerabilities » CVE-2008-5284

Overview

Vulnerability Score 10.0 10.0
CVE Id CVE-2008-5284
Last Modified 07 Mar 2011 10:14:19
Published 28 Nov 2008 09:30:00
Confidentiality Impact COMPLETE COMPLETE
Integrity Impact COMPLETE COMPLETE
Availability Impact COMPLETE COMPLETE
Access Vector NETWORK
Access Complexity LOW
Authentication NONE

CVE-2008-5284

Summary

The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.

Vulnerable Systems

Application

  • Iea Software Air Marshal 1.0.10

  • Iea Software Air Marshal 1.0.11

  • Iea Software Air Marshal 1.0.15

  • Iea Software Air Marshal 1.0.16

  • Iea Software Air Marshal 1.0.18

  • Iea Software Air Marshal 1.0.19

  • Iea Software Air Marshal 1.0.20

  • Iea Software Air Marshal 1.0.21

  • Iea Software Air Marshal 1.0.22

  • Iea Software Air Marshal 1.0.3

  • Iea Software Air Marshal 1.0.4

  • Iea Software Air Marshal 1.0.5

  • Iea Software Air Marshal 1.0.6

  • Iea Software Air Marshal 1.0.7

  • Iea Software Air Marshal 1.0.8

  • Iea Software Air Marshal 1.0.9

  • Iea Software Air Marshal 2.0.0

  • Iea Software Air Marshal 2.0.0.b.7

  • Iea Software Air Marshal 2.0.0.b1

  • Iea Software Air Marshal 2.0.1

  • Iea Software Air Marshal 2.0.3

  • Iea Software Air Marshal 2.0.4

  • Iea Software Air Marshal 2.0.5

  • Iea Software Emerald 5.0.24

  • Iea Software Emerald 5.0.25

  • Iea Software Emerald 5.0.26

  • Iea Software Emerald 5.0.27

  • Iea Software Emerald 5.0.28

  • Iea Software Emerald 5.0.29

  • Iea Software Emerald 5.0.30

  • Iea Software Emerald 5.0.31

  • Iea Software Emerald 5.0.32

  • Iea Software Emerald 5.0.33

  • Iea Software Emerald 5.0.35

  • Iea Software Emerald 5.0.36

  • Iea Software Emerald 5.0.37

  • Iea Software Emerald 5.0.39

  • Iea Software Emerald 5.0.40

  • Iea Software Emerald 5.0.41

  • Iea Software Emerald 5.0.42

  • Iea Software Emerald 5.0.44

  • Iea Software Emerald 5.0.46

  • Iea Software Emerald 5.0.48

  • Iea Software Emerald 5.0.49

  • Iea Software Emerald 5.0.50

  • Iea Software Emerald 5.0.51

  • Iea Software Radius Test Client 4.0.15

  • Iea Software Radius Test Client 4.0.20

  • Iea Software Radiusnt 3.0.145

  • Iea Software Radiusnt 3.0.147

  • Iea Software Radiusnt 3.0.149

  • Iea Software Radiusnt 3.0.150

  • Iea Software Radiusnt 3.0.154

  • Iea Software Radiusnt 3.0.158

  • Iea Software Radiusnt 3.0.162

  • Iea Software Radiusnt 3.0.167

  • Iea Software Radiusnt 3.0.168

  • Iea Software Radiusnt 3.0.171

  • Iea Software Radiusnt 3.0.172

  • Iea Software Radiusnt 3.0.173

  • Iea Software Radiusnt 3.0.174

  • Iea Software Radiusnt 3.0.175

  • Iea Software Radiusnt 3.0.176

  • Iea Software Radiusnt 3.0.177

  • Iea Software Radiusnt 3.0.178

  • Iea Software Radiusnt 3.0.179

  • Iea Software Radiusnt 3.0.182

  • Iea Software Radiusnt 3.0.183

  • Iea Software Radiusnt 3.0.184

  • Iea Software Radiusnt 3.0.185

  • Iea Software Radiusnt 3.0.186

  • Iea Software Radiusnt 3.0.188

  • Iea Software Radiusnt 3.0.189

  • Iea Software Radiusnt 3.0.190

  • Iea Software Radiusnt 3.0.191

  • Iea Software Radiusnt 4.0.1

  • Iea Software Radiusnt 4.0.10

  • Iea Software Radiusnt 4.0.11

  • Iea Software Radiusnt 4.0.12

  • Iea Software Radiusnt 4.0.13

  • Iea Software Radiusnt 4.0.14

  • Iea Software Radiusnt 4.0.15

  • Iea Software Radiusnt 4.0.17

  • Iea Software Radiusnt 4.0.193

  • Iea Software Radiusnt 4.0.2

  • Iea Software Radiusnt 4.0.20

  • Iea Software Radiusnt 4.0.21

  • Iea Software Radiusnt 4.0.23

  • Iea Software Radiusnt 4.0.24

  • Iea Software Radiusnt 4.0.26

  • Iea Software Radiusnt 4.0.27

  • Iea Software Radiusnt 4.0.28

  • Iea Software Radiusnt 4.0.29

  • Iea Software Radiusnt 4.0.3

  • Iea Software Radiusnt 4.0.30

  • Iea Software Radiusnt 4.0.31

  • Iea Software Radiusnt 4.0.32

  • Iea Software Radiusnt 4.0.33

  • Iea Software Radiusnt 4.0.34

  • Iea Software Radiusnt 4.0.35

  • Iea Software Radiusnt 4.0.38

  • Iea Software Radiusnt 4.0.39

  • Iea Software Radiusnt 4.0.40

  • Iea Software Radiusnt 4.0.41

  • Iea Software Radiusnt 4.0.43

  • Iea Software Radiusnt 4.0.44

  • Iea Software Radiusnt 4.0.47

  • Iea Software Radiusnt 4.0.49

  • Iea Software Radiusnt 4.0.5

  • Iea Software Radiusnt 4.0.51

  • Iea Software Radiusnt 4.0.54

  • Iea Software Radiusnt 4.0.55

  • Iea Software Radiusnt 4.0.56

  • Iea Software Radiusnt 4.0.57

  • Iea Software Radiusnt 4.0.59

  • Iea Software Radiusnt 4.0.6

  • Iea Software Radiusnt 4.0.60

  • Iea Software Radiusnt 4.0.62

  • Iea Software Radiusnt 4.0.63

  • Iea Software Radiusnt 4.0.67

  • Iea Software Radiusnt 4.0.68

  • Iea Software Radiusnt 4.0.69

  • Iea Software Radiusnt 4.0.7

  • Iea Software Radiusnt 4.0.70

  • Iea Software Radiusnt 4.0.71

  • Iea Software Radiusnt 4.0.72

  • Iea Software Radiusnt 4.0.73

  • Iea Software Radiusnt 4.0.74

  • Iea Software Radiusnt 4.0.75

  • Iea Software Radiusnt 4.0.76

  • Iea Software Radiusnt 4.0.77

  • Iea Software Radiusnt 4.0.79

  • Iea Software Radiusnt 4.0.8

  • Iea Software Radiusnt 4.0.80

  • Iea Software Radiusnt 4.0.81

  • Iea Software Radiusnt 4.0.82

  • Iea Software Radiusnt 4.0.83

  • Iea Software Radiusnt 4.0.84

  • Iea Software Radiusnt 4.0.85

  • Iea Software Radiusnt 4.0.86

  • Iea Software Radiusnt 4.09

  • Iea Software Radiusnt 5.0.10b

  • Iea Software Radiusnt 5.0.13b

  • Iea Software Radiusnt 5.0.15b

  • Iea Software Radiusnt 5.0.17

  • Iea Software Radiusnt 5.0.22

  • Iea Software Radiusnt 5.0.27

  • Iea Software Radiusnt 5.0.29

  • Iea Software Radiusnt 5.0.31

  • Iea Software Radiusnt 5.0.35

  • Iea Software Radiusnt 5.0.36

  • Iea Software Radiusnt 5.0.38

  • Iea Software Radiusnt 5.0.39

  • Iea Software Radiusnt 5.0.42

  • Iea Software Radiusnt 5.0.43

  • Iea Software Radiusnt 5.0.45

  • Iea Software Radiusnt 5.0.49

  • Iea Software Radiusnt 5.0.4a

  • Iea Software Radiusnt 5.0.50

  • Iea Software Radiusnt 5.0.54

  • Iea Software Radiusnt 5.0.55

  • Iea Software Radiusnt 5.0.58

  • Iea Software Radiusnt 5.0.7a

  • Iea Software Radiusnt 5.0.8b

  • Iea Software Radiusnt 5.0.9b

  • Iea Software Radiusnt 5.1.10

  • Iea Software Radiusnt 5.1.15

  • Iea Software Radiusnt 5.1.16

  • Iea Software Radiusnt 5.1.17

  • Iea Software Radiusnt 5.1.19

  • Iea Software Radiusnt 5.1.24

  • Iea Software Radiusnt 5.1.25

  • Iea Software Radiusnt 5.1.29

  • Iea Software Radiusnt 5.1.3

  • Iea Software Radiusnt 5.1.35

  • Iea Software Radiusnt 5.1.38

  • Iea Software Radiusnt 5.1.4

  • Iea Software Radiusnt 5.1.40

  • Iea Software Radiusnt 5.1.41

  • Iea Software Radiusnt 5.1.42

  • Iea Software Radiusnt 5.1.5

  • Iea Software Radiusnt 5.1.6

  • Iea Software Radiusx 3.0.145

  • Iea Software Radiusx 3.0.147

  • Iea Software Radiusx 3.0.149

  • Iea Software Radiusx 3.0.150

  • Iea Software Radiusx 3.0.154

  • Iea Software Radiusx 3.0.158

  • Iea Software Radiusx 3.0.162

  • Iea Software Radiusx 3.0.167

  • Iea Software Radiusx 3.0.168

  • Iea Software Radiusx 3.0.171

  • Iea Software Radiusx 3.0.172

  • Iea Software Radiusx 3.0.173

  • Iea Software Radiusx 3.0.174

  • Iea Software Radiusx 3.0.175

  • Iea Software Radiusx 3.0.176

  • Iea Software Radiusx 3.0.177

  • Iea Software Radiusx 3.0.178

  • Iea Software Radiusx 3.0.179

  • Iea Software Radiusx 3.0.182

  • Iea Software Radiusx 3.0.183

  • Iea Software Radiusx 3.0.184

  • Iea Software Radiusx 3.0.185

  • Iea Software Radiusx 3.0.186

  • Iea Software Radiusx 3.0.188

  • Iea Software Radiusx 3.0.189

  • Iea Software Radiusx 3.0.190

  • Iea Software Radiusx 3.0.191

  • Iea Software Radiusx 4.0.1

  • Iea Software Radiusx 4.0.10

  • Iea Software Radiusx 4.0.11

  • Iea Software Radiusx 4.0.12

  • Iea Software Radiusx 4.0.13

  • Iea Software Radiusx 4.0.14

  • Iea Software Radiusx 4.0.15

  • Iea Software Radiusx 4.0.17

  • Iea Software Radiusx 4.0.193

  • Iea Software Radiusx 4.0.2

  • Iea Software Radiusx 4.0.20

  • Iea Software Radiusx 4.0.21

  • Iea Software Radiusx 4.0.23

  • Iea Software Radiusx 4.0.24

  • Iea Software Radiusx 4.0.26

  • Iea Software Radiusx 4.0.27

  • Iea Software Radiusx 4.0.28

  • Iea Software Radiusx 4.0.29

  • Iea Software Radiusx 4.0.3

  • Iea Software Radiusx 4.0.30

  • Iea Software Radiusx 4.0.31

  • Iea Software Radiusx 4.0.32

  • Iea Software Radiusx 4.0.33

  • Iea Software Radiusx 4.0.34

  • Iea Software Radiusx 4.0.35

  • Iea Software Radiusx 4.0.38

  • Iea Software Radiusx 4.0.39

  • Iea Software Radiusx 4.0.40

  • Iea Software Radiusx 4.0.41

  • Iea Software Radiusx 4.0.43

  • Iea Software Radiusx 4.0.44

  • Iea Software Radiusx 4.0.47

  • Iea Software Radiusx 4.0.49

  • Iea Software Radiusx 4.0.5

  • Iea Software Radiusx 4.0.51

  • Iea Software Radiusx 4.0.54

  • Iea Software Radiusx 4.0.55

  • Iea Software Radiusx 4.0.56

  • Iea Software Radiusx 4.0.57

  • Iea Software Radiusx 4.0.59

  • Iea Software Radiusx 4.0.6

  • Iea Software Radiusx 4.0.60

  • Iea Software Radiusx 4.0.62

  • Iea Software Radiusx 4.0.63

  • Iea Software Radiusx 4.0.67

  • Iea Software Radiusx 4.0.68

  • Iea Software Radiusx 4.0.69

  • Iea Software Radiusx 4.0.7

  • Iea Software Radiusx 4.0.70

  • Iea Software Radiusx 4.0.71

  • Iea Software Radiusx 4.0.72

  • Iea Software Radiusx 4.0.73

  • Iea Software Radiusx 4.0.74

  • Iea Software Radiusx 4.0.75

  • Iea Software Radiusx 4.0.76

  • Iea Software Radiusx 4.0.77

  • Iea Software Radiusx 4.0.79

  • Iea Software Radiusx 4.0.8

  • Iea Software Radiusx 4.0.80

  • Iea Software Radiusx 4.0.81

  • Iea Software Radiusx 4.0.82

  • Iea Software Radiusx 4.0.83

  • Iea Software Radiusx 4.0.84

  • Iea Software Radiusx 4.0.85

  • Iea Software Radiusx 4.0.86

  • Iea Software Radiusx 4.0.87

  • Iea Software Radiusx 4.0.88

  • Iea Software Radiusx 4.0.9

  • Iea Software Radiusx 5.0.10b

  • Iea Software Radiusx 5.0.13b

  • Iea Software Radiusx 5.0.15b

  • Iea Software Radiusx 5.0.17

  • Iea Software Radiusx 5.0.22

  • Iea Software Radiusx 5.0.27

  • Iea Software Radiusx 5.0.29

  • Iea Software Radiusx 5.0.31

  • Iea Software Radiusx 5.0.35

  • Iea Software Radiusx 5.0.36

  • Iea Software Radiusx 5.0.38

  • Iea Software Radiusx 5.0.39

  • Iea Software Radiusx 5.0.42

  • Iea Software Radiusx 5.0.43

  • Iea Software Radiusx 5.0.45

  • Iea Software Radiusx 5.0.49

  • Iea Software Radiusx 5.0.4a

  • Iea Software Radiusx 5.0.50

  • Iea Software Radiusx 5.0.54

  • Iea Software Radiusx 5.0.55

  • Iea Software Radiusx 5.0.57

  • Iea Software Radiusx 5.0.58

  • Iea Software Radiusx 5.0.7a

  • Iea Software Radiusx 5.0.8b

  • Iea Software Radiusx 5.0.9b

  • Iea Software Radiusx 5.1.10

  • Iea Software Radiusx 5.1.15

  • Iea Software Radiusx 5.1.16

  • Iea Software Radiusx 5.1.17

  • Iea Software Radiusx 5.1.19

  • Iea Software Radiusx 5.1.24

  • Iea Software Radiusx 5.1.25

  • Iea Software Radiusx 5.1.29

  • Iea Software Radiusx 5.1.3

  • Iea Software Radiusx 5.1.35

  • Iea Software Radiusx 5.1.38

  • Iea Software Radiusx 5.1.4

  • Iea Software Radiusx 5.1.40

  • Iea Software Radiusx 5.1.41

  • Iea Software Radiusx 5.1.42

  • Iea Software Radiusx 5.1.5

  • Iea Software Radiusx 5.1.6

  • Iea Software Radlogin 4.0.15

  • Iea Software Radlogin 4.0.20


References

VUPEN - ADV-2008-0484

BID - 27701

BUGTRAQ - 20080208 NULL byte writing in Emerald, RadiusNT/X and Air Marshal

CONFIRM - http://www.iea-software.com/docs/Radius40/changes.txt

CONFIRM - http://www.iea-software.com/docs/Emerald5/changes.txt

CONFIRM - http://www.iea-software.com/docs/airmarshal1/changes.txt

SECUNIA - 28846

MISC - http://aluigi.altervista.org/adv/emerdal-adv.txt


Last Updated: 27 May 2016 10:48:46