Unscored severity · published Mar 10, 2008
CVE-2008-1280
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to…
–
CVSS
2.5%
EPSS
No
On KEV
Description
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TI
True Image · Acronis
through 9.5.0.8072 · source: NVD
TI
True Image Windows Agent · Acronis
through 1.0.0.54 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1280
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1280
aluigi.altervista.org
http://aluigi.altervista.org/adv/acroagent-adv.txt
Vendor Advisory
http://secunia.com/advisories/29306
www.securityfocus.com
http://www.securityfocus.com/archive/1/489362/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/28169
www.vupen.com
http://www.vupen.com/english/advisories/2008/0812/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/41070
More from True Image
8.8
CVE-2017-3219
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP
8.1
CVE-2021-32581
Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build…
7.8
CVE-2022-24115
Local privilege escalation due to unrestricted loading of unsigned libraries
7.8
CVE-2022-24113
Local privilege escalation due to excessive permissions assigned to child processes
7.8
CVE-2021-44204
Local privilege escalation via named pipe due to improper access control checks