CVE-2008-1648 Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some o...
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sympa | = 0.001 | No fix listed |
| sympa | = 0.002 | No fix listed |
| sympa | = 0.003 | No fix listed |
| sympa | = 0.004 | No fix listed |
| sympa | = 0.005 | No fix listed |
| sympa | = 0.006 | No fix listed |
| sympa | = 0.007 | No fix listed |
| sympa | = 0.008 | No fix listed |
| sympa | = 0.009 | No fix listed |
| sympa | = 0.010 | No fix listed |
| sympa | = 0.011 | No fix listed |
| sympa | = 1.2.0 | No fix listed |
| sympa | = 1.2.1 | No fix listed |
| sympa | = 1.2.2 | No fix listed |
| sympa | = 1.3.0 | No fix listed |
| sympa | = 1.3.1 | No fix listed |
| sympa | = 1.3.1-2 | No fix listed |
| sympa | = 1.3.2 | No fix listed |
| sympa | = 1.3.3 | No fix listed |
| sympa | = 1.3.4 | No fix listed |
| sympa | = 1.3.4-1 | No fix listed |
| sympa | = 1.4.0 | No fix listed |
| sympa | = 1.4.2 | No fix listed |
| sympa | = 1.4.2-1 | No fix listed |
| sympa | = 1.5 | No fix listed |
Show 107 more
| Product | Affected versions | Fixed in |
|---|---|---|
| sympa | = 2.2.1b | No fix listed |
| sympa | = 2.2.2b | No fix listed |
| sympa | = 2.2.3b | No fix listed |
| sympa | = 2.2.4 | No fix listed |
| sympa | = 2.2.5 | No fix listed |
| sympa | = 2.2.6 | No fix listed |
| sympa | = 2.2.7 | No fix listed |
| sympa | = 2.2b | No fix listed |
| sympa | = 2.3.0 | No fix listed |
| sympa | = 2.3.1 | No fix listed |
| sympa | = 2.3.2 | No fix listed |
| sympa | = 2.3.3 | No fix listed |
| sympa | = 2.3.4 | No fix listed |
| sympa | = 2.3beta | No fix listed |
| sympa | = 2.4 | No fix listed |
| sympa | = 2.5 | No fix listed |
| sympa | = 2.5.1 | No fix listed |
| sympa | = 2.5.2 | No fix listed |
| sympa | = 2.5.3b | No fix listed |
| sympa | = 2.5.4b | No fix listed |
| sympa | = 2.6 | No fix listed |
| sympa | = 2.6.1 | No fix listed |
| sympa | = 2.7 | No fix listed |
| sympa | = 2.7.1 | No fix listed |
| sympa | = 2.7.2 | No fix listed |
| sympa | = 2.7.3 | No fix listed |
| sympa | = 2.7a | No fix listed |
| sympa | = 2.7b.1 | No fix listed |
| sympa | = 2.7b.2 | No fix listed |
| sympa | = 2.7b.3 | No fix listed |
| sympa | = 3.0 | No fix listed |
| sympa | = 3.0a | No fix listed |
| sympa | = 3.0a.1 | No fix listed |
| sympa | = 3.0b.4 | No fix listed |
| sympa | = 3.0b.8 | No fix listed |
| sympa | = 3.0b.9 | No fix listed |
| sympa | = 3.1 | No fix listed |
| sympa | = 3.1.1 | No fix listed |
| sympa | = 3.1b.7 | No fix listed |
| sympa | = 3.1b.8 | No fix listed |
| sympa | = 3.1b.9 | No fix listed |
| sympa | = 3.1b.10 | No fix listed |
| sympa | = 3.1b.12 | No fix listed |
| sympa | = 3.1b.13 | No fix listed |
| sympa | = 3.2 | No fix listed |
| sympa | = 3.2.1 | No fix listed |
| sympa | = 3.2.2a | No fix listed |
| sympa | = 3.3 | No fix listed |
| sympa | = 3.3.1 | No fix listed |
| sympa | = 3.3.3 | No fix listed |
| sympa | = 3.3.4b.3 | No fix listed |
| sympa | = 3.3.4b.4 | No fix listed |
| sympa | = 3.3.4b.5 | No fix listed |
| sympa | = 3.3.4b.6 | No fix listed |
| sympa | = 3.3.4b.7 | No fix listed |
| sympa | = 3.3.4b.8 | No fix listed |
| sympa | = 3.3.4b.9 | No fix listed |
| sympa | = 3.3.5 | No fix listed |
| sympa | = 3.3.6b.2 | No fix listed |
| sympa | = 3.3.6b.3 | No fix listed |
| sympa | = 3.3.6b.4 | No fix listed |
| sympa | = 3.3.6b.5 | No fix listed |
| sympa | = 3.3.6b.6 | No fix listed |
| sympa | = 3.3a-vhost.10 | No fix listed |
| sympa | = 3.3b.3 | No fix listed |
| sympa | = 3.3b.4 | No fix listed |
| sympa | = 3.4 | No fix listed |
| sympa | = 4.0 | No fix listed |
| sympa | = 4.0.a1 | No fix listed |
| sympa | = 4.0.a3 | No fix listed |
| sympa | = 4.0.a4 | No fix listed |
| sympa | = 4.0.a5 | No fix listed |
| sympa | = 4.0.a6 | No fix listed |
| sympa | = 4.0.a7 | No fix listed |
| sympa | = 4.0.a8 | No fix listed |
| sympa | = 4.0.a9 | No fix listed |
| sympa | = 4.0.b1 | No fix listed |
| sympa | = 4.0.b2 | No fix listed |
| sympa | = 4.0.b3 | No fix listed |
| sympa | = 4.1 | No fix listed |
| sympa | = 4.2b.1 | No fix listed |
| sympa | = 4.2b.3 | No fix listed |
| sympa | = 5.0 | No fix listed |
| sympa | = 5.0a | No fix listed |
| sympa | = 5.0a.1 | No fix listed |
| sympa | = 5.0b | No fix listed |
| sympa | = 5.0b.1 | No fix listed |
| sympa | = 5.1 | No fix listed |
| sympa | = 5.1.2 | No fix listed |
| sympa | = 5.2 | No fix listed |
| sympa | = 5.2b | No fix listed |
| sympa | = 5.2b2 | No fix listed |
| sympa | = 5.3 | No fix listed |
| sympa | = 5.3.2 | No fix listed |
| sympa | = 5.3a.8 | No fix listed |
| sympa | = 5.3a.9 | No fix listed |
| sympa | = 5.3a.10 | No fix listed |
| sympa | = 5.3b.1 | No fix listed |
| sympa | = 5.3b.3 | No fix listed |
| sympa | = 5.3b.4 | No fix listed |
| sympa | = 5.3b.5 | No fix listed |
| sympa | = 5.4a.2 | No fix listed |
| sympa | = 5.4a.4 | No fix listed |
| sympa | = 5.4b.1 | No fix listed |
| debian/sympa(Debian:12) | < 5.3.4-4 | 5.3.4-4 |
| debian/sympa(Debian:13) | < 5.3.4-4 | 5.3.4-4 |
| debian/sympa(Debian:14) | < 5.3.4-4 | 5.3.4-4 |
References
- 29575 third-party-advisory vendor-advisory
- 30910 third-party-advisory
- sourcesup.cru.fr exploit
- DSA-1600 vendor-advisory
- MDVSA-2008:133 vendor-advisory
- 28539 vdb-entry
- www.sympa.org
- ADV-2008-1080 vdb-entry
- sympa-mimeentityhead-dos(41561) vdb-entry
- Debian Security Tracker CVE-2008-1648 vendor-advisory
- bugs.debian.org issue-tracking