CVE-2008-1648: Input Validation
Published Apr 2, 2008
·Updated
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.
Affected Software
129 affected components
sympa sympa=3.2.2a
sympa sympa=3.3b.4
sympa sympa=3.3.3
sympa sympa=2.7b.2
sympa sympa=1.2.0
sympa sympa=2.2b
sympa sympa=2.2.3b
sympa sympa=2.2.5
sympa sympa=0.005
sympa sympa=0.007
sympa sympa=2.2.2b
sympa sympa=5.3
sympa sympa=2.3.2
sympa sympa=3.1
sympa sympa=3.0a
sympa sympa=5.0b
sympa sympa=4.2b.3
sympa sympa=1.4.0
sympa sympa=5.0a
sympa sympa=2.5.1
sympa sympa=5.3a.10
sympa sympa=4.0.b3
sympa sympa=5.3b.1
sympa sympa=1.3.4-1
sympa sympa=5.2b
sympa sympa=5.4a.4
sympa sympa=3.3.1
sympa sympa=4.0.a1
sympa sympa=2.5.4b
sympa sympa=3.1b.7
sympa sympa=4.0
sympa sympa=3.4
sympa sympa=5.3.2
sympa sympa=0.004
sympa sympa=3.1b.13
sympa sympa=5.4a.2
sympa sympa=1.2.2
sympa sympa=2.6
sympa sympa=4.0.a7
sympa sympa=1.3.2
sympa sympa=5.0
sympa sympa=3.3.4b.7
sympa sympa=4.0.a4
sympa sympa=2.2.1b
sympa sympa=2.3.4
sympa sympa=3.3.4b.8
sympa sympa=4.2b.1
sympa sympa=5.3a.9
sympa sympa=3.2.1
sympa sympa=4.0.a6
sympa sympa=5.3b.4
sympa sympa=1.3.1-2
sympa sympa=3.3.6b.4
sympa sympa=3.0
sympa sympa=2.3.3
sympa sympa=2.6.1
sympa sympa=0.009
sympa sympa=1.3.3
sympa sympa=3.3.4b.5
sympa sympa=2.4
sympa sympa=4.0.b2
sympa sympa=3.3.6b.5
sympa sympa=2.7b.1
sympa sympa=3.1b.8
sympa sympa=3.3.5
sympa sympa=5.4b.1
sympa sympa=3.1b.9
sympa sympa=5.1
sympa sympa=1.3.4
sympa sympa=3.3b.3
sympa sympa=5.0a.1
sympa sympa=5.2b2
sympa sympa=5.3a.8
sympa sympa=0.001
sympa sympa=5.0b.1
sympa sympa=2.7.1
sympa sympa=2.7.2
sympa sympa=5.1.2
sympa sympa=3.1b.10
sympa sympa=1.3.1
sympa sympa=0.006
sympa sympa=3.3.6b.3
sympa sympa=0.002
sympa sympa=0.010
sympa sympa=2.7
sympa sympa=4.0.a9
sympa sympa=4.0.a3
sympa sympa=0.011
sympa sympa=2.3.1
sympa sympa=2.3.0
sympa sympa=3.0b.4
sympa sympa=3.3.4b.3
sympa sympa=2.5.3b
sympa sympa=5.2
sympa sympa=2.2.7
sympa sympa=0.003
sympa sympa=3.3.4b.9
sympa sympa=2.5.2
sympa sympa=3.3.6b.2
sympa sympa=2.5
sympa sympa=3.1b.12
sympa sympa=1.4.2-1
sympa sympa=3.3
sympa sympa=3.3.6b.6
sympa sympa=2.2.4
sympa sympa=3.0a.1
sympa sympa=1.2.1
sympa sympa=3.3.4b.6
sympa sympa=2.7b.3
sympa sympa=2.7a
sympa sympa=2.7.3
sympa sympa=2.3beta
sympa sympa=4.0.b1
sympa sympa=1.3.0
sympa sympa=5.3b.5
sympa sympa=1.5
sympa sympa=3.3a-vhost.10
sympa sympa=3.2
sympa sympa=4.0.a5
sympa sympa=3.0b.8
sympa sympa=1.4.2
sympa sympa=4.0.a8
sympa sympa=3.3.4b.4
sympa sympa=5.3b.3
sympa sympa=3.1.1
sympa sympa=4.1
sympa sympa=0.008
sympa sympa=3.0b.9
sympa sympa=2.2.6
Event History
Apr 2, 2008
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-1648?
CVE-2008-1648 has a severity rating that may allow remote attackers to cause a denial of service.
2
How do I fix CVE-2008-1648?
To fix CVE-2008-1648, upgrade to Sympa version 5.4 or later, which addresses this vulnerability.
3
Which versions of Sympa are affected by CVE-2008-1648?
CVE-2008-1648 affects multiple versions of Sympa, including 0.001 to 5.3, prior to 5.4.
4
What type of vulnerability is CVE-2008-1648?
CVE-2008-1648 is a remote denial of service vulnerability.
5
Can CVE-2008-1648 be exploited remotely?
Yes, CVE-2008-1648 can be exploited remotely via a malformed e-mail message.