CVE-2008-2953 Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference.
MediumCVSS 5.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Linux DC++ (linuxdcpp) before 0.707 allows remote attackers to cause a denial of service (crash) via "partial file list requests" that trigger a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linux direct connect | = 0.686 | No fix listed |
| linux direct connect | = 0.699 | No fix listed |
| linux direct connect | = 0.700 | No fix listed |
| linux direct connect | = 0.701 | No fix listed |
| linux direct connect | = 0.702 | No fix listed |
| linux direct connect | = 0.703 | No fix listed |
| linux direct connect | = 0.704 | No fix listed |
| linux direct connect | = 0.705 | No fix listed |
| linux direct connect | = 0.706 | No fix listed |
References
- cvs.berlios.de exploit
- 30812 third-party-advisory vendor-advisory
- 30907 third-party-advisory
- 30918 third-party-advisory
- sourceforge.net
- 29924 vdb-entry
- 1020407 vdb-entry
- 1020408 vdb-entry
- dc-partialfilelist-dos(43341) vdb-entry
- FEDORA-2008-6018 vendor-advisory
- FEDORA-2008-6038 vendor-advisory