Unscored severity · published Mar 10, 2008
CVE-2008-1279
Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to…
–
CVSS
1.7%
EPSS
No
On KEV
Description
Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a packet with an invalid length field, which causes an out-of-bounds read.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.7% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
True Image · Acronis
through 1.5.19.191; through 9.5.0.8072 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1279
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1279
aluigi.altervista.org
http://aluigi.altervista.org/adv/acrogroup-adv.txt
Vendor Advisory
http://secunia.com/advisories/29306
www.securityfocus.com
http://www.securityfocus.com/archive/1/489353/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/28169
www.vupen.com
http://www.vupen.com/english/advisories/2008/0813/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41071
More from True Image
8.8
CVE-2017-3219
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP
8.1
CVE-2021-32581
Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build…
7.8
CVE-2022-24115
Local privilege escalation due to unrestricted loading of unsigned libraries
7.8
CVE-2022-24113
Local privilege escalation due to excessive permissions assigned to child processes
7.8
CVE-2021-44204
Local privilege escalation via named pipe due to improper access control checks