CVE-2008-1280

EUVD-2008-1288
Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service (crash) via a malformed packet to port 9876, which triggers a NULL pointer dereference.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 80%
Affected Products (NVD)
VendorProductVersion
acronistrue_image
𝑥
≤ 9.5.0.8072
acronistrue_image_windows_agent
𝑥
≤ 1.0.0.54
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://aluigi.altervista.org/adv/acroagent-adv.txt
http://secunia.com/advisories/29306
http://www.securityfocus.com/archive/1/489362/100/0/threaded
http://www.securityfocus.com/bid/28169
http://www.vupen.com/english/advisories/2008/0812/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41070
http://aluigi.altervista.org/adv/acroagent-adv.txt
http://secunia.com/advisories/29306
http://www.securityfocus.com/archive/1/489362/100/0/threaded
http://www.securityfocus.com/bid/28169
http://www.vupen.com/english/advisories/2008/0812/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41070