CVE-2008-1278 The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header,....
MediumCVSS 5.0
EPSS 7.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The RemotelyAnywhere.exe service in the Remotely Anywhere Server and Workstation 8.0.668 and earlier allows remote attackers to cause a denial of service (crash) via an invalid Accept-Charset header, which triggers a NULL pointer dereference. NOTE: the service is automatically restarted.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| remotelyanywhere | <= 8.0.668 | No fix listed |
References
- aluigi.altervista.org
- 29296 third-party-advisory vendor-advisory
- 20080310 NULL pointer in Remotely Anywhere 8.0.668 mailing-list
- 28175 exploit vdb-entry
- ADV-2008-0816 vdb-entry
- remotelyanywhere-http-dos(41077) vdb-entry