Unscored severity · published Jul 1, 2008
CVE-2008-2953
Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference
–
CVSS
3.2%
EPSS
No
On KEV
Description
Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DC
Direct Connect · Linux
0.686; 0.699; 0.700; 0.701; 0.702; 0.703; +3 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2953
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2953
Exploit
http://cvs.berlios.de/cgi-bin/viewcvs.cgi/linuxdcpp/linuxdcpp/client/ShareManager.cpp.diff?r1=1.14&r2=1.15&sortby=date
Vendor Advisory
http://secunia.com/advisories/30812
secunia.com
http://secunia.com/advisories/30907
secunia.com
http://secunia.com/advisories/30918
sourceforge.net
http://sourceforge.net/project/shownotes.php?release_id=608612&group_id=40287
www.securityfocus.com
http://www.securityfocus.com/bid/29924
More from Direct Connect
–
CVE-2008-2954
client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via an empty private message, which triggers an…