CVE-2008-5284
29.11.2008, 02:30
The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.Enginsight
| Vendor | Product | Version |
|---|---|---|
| iea_software | air_marshal | 1.0.3 |
| iea_software | air_marshal | 1.0.4 |
| iea_software | air_marshal | 1.0.5 |
| iea_software | air_marshal | 1.0.6 |
| iea_software | air_marshal | 1.0.7 |
| iea_software | air_marshal | 1.0.8 |
| iea_software | air_marshal | 1.0.9 |
| iea_software | air_marshal | 1.0.10 |
| iea_software | air_marshal | 1.0.11 |
| iea_software | air_marshal | 1.0.15 |
| iea_software | air_marshal | 1.0.16 |
| iea_software | air_marshal | 1.0.18 |
| iea_software | air_marshal | 1.0.19 |
| iea_software | air_marshal | 1.0.20 |
| iea_software | air_marshal | 1.0.21 |
| iea_software | air_marshal | 1.0.22 |
| iea_software | air_marshal | 2.0.0 |
| iea_software | air_marshal | 2.0.0.b.7:b.7 |
| iea_software | air_marshal | 2.0.0.b1:b1 |
| iea_software | air_marshal | 2.0.1 |
| iea_software | air_marshal | 2.0.3 |
| iea_software | air_marshal | 2.0.4 |
| iea_software | air_marshal | 2.0.5 |
| iea_software | emerald | 5.0.24 |
| iea_software | emerald | 5.0.25 |
| iea_software | emerald | 5.0.26 |
| iea_software | emerald | 5.0.27 |
| iea_software | emerald | 5.0.28 |
| iea_software | emerald | 5.0.29 |
| iea_software | emerald | 5.0.30 |
| iea_software | emerald | 5.0.31 |
| iea_software | emerald | 5.0.32 |
| iea_software | emerald | 5.0.33 |
| iea_software | emerald | 5.0.35 |
| iea_software | emerald | 5.0.36 |
| iea_software | emerald | 5.0.37 |
| iea_software | emerald | 5.0.39 |
| iea_software | emerald | 5.0.40 |
| iea_software | emerald | 5.0.41 |
| iea_software | emerald | 5.0.42 |
| iea_software | emerald | 5.0.44 |
| iea_software | emerald | 5.0.46 |
| iea_software | emerald | 5.0.48 |
| iea_software | emerald | 5.0.49 |
| iea_software | emerald | 5.0.50 |
| iea_software | emerald | 5.0.51 |
| iea_software | radius_test_client | 4.0.15 |
| iea_software | radius_test_client | 4.0.20 |
| iea_software | radiusnt | 𝑥 ≤ 5.1.42 |
| iea_software | radiusnt | 3.0.145 |
| iea_software | radiusnt | 3.0.147 |
| iea_software | radiusnt | 3.0.149 |
| iea_software | radiusnt | 3.0.150 |
| iea_software | radiusnt | 3.0.154 |
| iea_software | radiusnt | 3.0.158 |
| iea_software | radiusnt | 3.0.162 |
| iea_software | radiusnt | 3.0.167 |
| iea_software | radiusnt | 3.0.168 |
| iea_software | radiusnt | 3.0.171 |
| iea_software | radiusnt | 3.0.172 |
| iea_software | radiusnt | 3.0.173 |
| iea_software | radiusnt | 3.0.174 |
| iea_software | radiusnt | 3.0.175 |
| iea_software | radiusnt | 3.0.176 |
| iea_software | radiusnt | 3.0.177 |
| iea_software | radiusnt | 3.0.178 |
| iea_software | radiusnt | 3.0.179 |
| iea_software | radiusnt | 3.0.182 |
| iea_software | radiusnt | 3.0.183 |
| iea_software | radiusnt | 3.0.184 |
| iea_software | radiusnt | 3.0.185 |
| iea_software | radiusnt | 3.0.186 |
| iea_software | radiusnt | 3.0.188 |
| iea_software | radiusnt | 3.0.189 |
| iea_software | radiusnt | 3.0.190 |
| iea_software | radiusnt | 3.0.191 |
| iea_software | radiusnt | 4.0.1 |
| iea_software | radiusnt | 4.0.2 |
| iea_software | radiusnt | 4.0.3 |
| iea_software | radiusnt | 4.0.5 |
| iea_software | radiusnt | 4.0.6 |
| iea_software | radiusnt | 4.0.7 |
| iea_software | radiusnt | 4.0.8 |
| iea_software | radiusnt | 4.0.10 |
| iea_software | radiusnt | 4.0.11 |
| iea_software | radiusnt | 4.0.12 |
| iea_software | radiusnt | 4.0.13 |
| iea_software | radiusnt | 4.0.14 |
| iea_software | radiusnt | 4.0.15 |
| iea_software | radiusnt | 4.0.17 |
| iea_software | radiusnt | 4.0.20 |
| iea_software | radiusnt | 4.0.21 |
| iea_software | radiusnt | 4.0.23 |
| iea_software | radiusnt | 4.0.24 |
| iea_software | radiusnt | 4.0.26 |
| iea_software | radiusnt | 4.0.27 |
| iea_software | radiusnt | 4.0.28 |
| iea_software | radiusnt | 4.0.29 |
| iea_software | radiusnt | 4.0.30 |
| iea_software | radiusnt | 4.0.31 |
| iea_software | radiusnt | 4.0.32 |
| iea_software | radiusnt | 4.0.33 |
| iea_software | radiusnt | 4.0.34 |
| iea_software | radiusnt | 4.0.35 |
| iea_software | radiusnt | 4.0.38 |
| iea_software | radiusnt | 4.0.39 |
| iea_software | radiusnt | 4.0.40 |
| iea_software | radiusnt | 4.0.41 |
| iea_software | radiusnt | 4.0.43 |
| iea_software | radiusnt | 4.0.44 |
| iea_software | radiusnt | 4.0.47 |
| iea_software | radiusnt | 4.0.49 |
| iea_software | radiusnt | 4.0.51 |
| iea_software | radiusnt | 4.0.54 |
| iea_software | radiusnt | 4.0.55 |
| iea_software | radiusnt | 4.0.56 |
| iea_software | radiusnt | 4.0.57 |
| iea_software | radiusnt | 4.0.59 |
| iea_software | radiusnt | 4.0.60 |
| iea_software | radiusnt | 4.0.62 |
| iea_software | radiusnt | 4.0.63 |
| iea_software | radiusnt | 4.0.67 |
| iea_software | radiusnt | 4.0.68 |
| iea_software | radiusnt | 4.0.69 |
| iea_software | radiusnt | 4.0.70 |
| iea_software | radiusnt | 4.0.71 |
| iea_software | radiusnt | 4.0.72 |
| iea_software | radiusnt | 4.0.73 |
| iea_software | radiusnt | 4.0.74 |
| iea_software | radiusnt | 4.0.75 |
| iea_software | radiusnt | 4.0.76 |
| iea_software | radiusnt | 4.0.77 |
| iea_software | radiusnt | 4.0.79 |
| iea_software | radiusnt | 4.0.80 |
| iea_software | radiusnt | 4.0.81 |
| iea_software | radiusnt | 4.0.82 |
| iea_software | radiusnt | 4.0.83 |
| iea_software | radiusnt | 4.0.84 |
| iea_software | radiusnt | 4.0.85 |
| iea_software | radiusnt | 4.0.86 |
| iea_software | radiusnt | 4.0.193 |
| iea_software | radiusnt | 4.09 |
| iea_software | radiusnt | 5.0.4a:a |
| iea_software | radiusnt | 5.0.7a:a |
| iea_software | radiusnt | 5.0.8b:b |
| iea_software | radiusnt | 5.0.9b:b |
| iea_software | radiusnt | 5.0.10b:b |
| iea_software | radiusnt | 5.0.13b:b |
| iea_software | radiusnt | 5.0.15b:b |
| iea_software | radiusnt | 5.0.17 |
| iea_software | radiusnt | 5.0.22 |
| iea_software | radiusnt | 5.0.27 |
| iea_software | radiusnt | 5.0.29 |
| iea_software | radiusnt | 5.0.31 |
| iea_software | radiusnt | 5.0.35 |
| iea_software | radiusnt | 5.0.36 |
| iea_software | radiusnt | 5.0.38 |
| iea_software | radiusnt | 5.0.39 |
| iea_software | radiusnt | 5.0.42 |
| iea_software | radiusnt | 5.0.43 |
| iea_software | radiusnt | 5.0.45 |
| iea_software | radiusnt | 5.0.49 |
| iea_software | radiusnt | 5.0.50 |
| iea_software | radiusnt | 5.0.54 |
| iea_software | radiusnt | 5.0.55 |
| iea_software | radiusnt | 5.0.58 |
| iea_software | radiusnt | 5.1.3 |
| iea_software | radiusnt | 5.1.4 |
| iea_software | radiusnt | 5.1.5 |
| iea_software | radiusnt | 5.1.6 |
| iea_software | radiusnt | 5.1.10 |
| iea_software | radiusnt | 5.1.15 |
| iea_software | radiusnt | 5.1.16 |
| iea_software | radiusnt | 5.1.17 |
| iea_software | radiusnt | 5.1.19 |
| iea_software | radiusnt | 5.1.24 |
| iea_software | radiusnt | 5.1.25 |
| iea_software | radiusnt | 5.1.29 |
| iea_software | radiusnt | 5.1.35 |
| iea_software | radiusnt | 5.1.38 |
| iea_software | radiusnt | 5.1.40 |
| iea_software | radiusnt | 5.1.41 |
| iea_software | radiusx | 𝑥 ≤ 5.1.42 |
| iea_software | radiusx | 3.0.145 |
| iea_software | radiusx | 3.0.147 |
| iea_software | radiusx | 3.0.149 |
| iea_software | radiusx | 3.0.150 |
| iea_software | radiusx | 3.0.154 |
| iea_software | radiusx | 3.0.158 |
| iea_software | radiusx | 3.0.162 |
| iea_software | radiusx | 3.0.167 |
| iea_software | radiusx | 3.0.168 |
| iea_software | radiusx | 3.0.171 |
| iea_software | radiusx | 3.0.172 |
| iea_software | radiusx | 3.0.173 |
| iea_software | radiusx | 3.0.174 |
| iea_software | radiusx | 3.0.175 |
| iea_software | radiusx | 3.0.176 |
| iea_software | radiusx | 3.0.177 |
| iea_software | radiusx | 3.0.178 |
| iea_software | radiusx | 3.0.179 |
| iea_software | radiusx | 3.0.182 |
| iea_software | radiusx | 3.0.183 |
| iea_software | radiusx | 3.0.184 |
| iea_software | radiusx | 3.0.185 |
| iea_software | radiusx | 3.0.186 |
| iea_software | radiusx | 3.0.188 |
| iea_software | radiusx | 3.0.189 |
| iea_software | radiusx | 3.0.190 |
| iea_software | radiusx | 3.0.191 |
| iea_software | radiusx | 4.0.1 |
| iea_software | radiusx | 4.0.2 |
| iea_software | radiusx | 4.0.3 |
| iea_software | radiusx | 4.0.5 |
| iea_software | radiusx | 4.0.6 |
| iea_software | radiusx | 4.0.7 |
| iea_software | radiusx | 4.0.8 |
| iea_software | radiusx | 4.0.9 |
| iea_software | radiusx | 4.0.10 |
| iea_software | radiusx | 4.0.11 |
| iea_software | radiusx | 4.0.12 |
| iea_software | radiusx | 4.0.13 |
| iea_software | radiusx | 4.0.14 |
| iea_software | radiusx | 4.0.15 |
| iea_software | radiusx | 4.0.17 |
| iea_software | radiusx | 4.0.20 |
| iea_software | radiusx | 4.0.21 |
| iea_software | radiusx | 4.0.23 |
| iea_software | radiusx | 4.0.24 |
| iea_software | radiusx | 4.0.26 |
| iea_software | radiusx | 4.0.27 |
| iea_software | radiusx | 4.0.28 |
| iea_software | radiusx | 4.0.29 |
| iea_software | radiusx | 4.0.30 |
| iea_software | radiusx | 4.0.31 |
| iea_software | radiusx | 4.0.32 |
| iea_software | radiusx | 4.0.33 |
| iea_software | radiusx | 4.0.34 |
| iea_software | radiusx | 4.0.35 |
| iea_software | radiusx | 4.0.38 |
| iea_software | radiusx | 4.0.39 |
| iea_software | radiusx | 4.0.40 |
| iea_software | radiusx | 4.0.41 |
| iea_software | radiusx | 4.0.43 |
| iea_software | radiusx | 4.0.44 |
| iea_software | radiusx | 4.0.47 |
| iea_software | radiusx | 4.0.49 |
| iea_software | radiusx | 4.0.51 |
| iea_software | radiusx | 4.0.54 |
| iea_software | radiusx | 4.0.55 |
| iea_software | radiusx | 4.0.56 |
| iea_software | radiusx | 4.0.57 |
| iea_software | radiusx | 4.0.59 |
| iea_software | radiusx | 4.0.60 |
| iea_software | radiusx | 4.0.62 |
| iea_software | radiusx | 4.0.63 |
| iea_software | radiusx | 4.0.67 |
| iea_software | radiusx | 4.0.68 |
| iea_software | radiusx | 4.0.69 |
| iea_software | radiusx | 4.0.70 |
| iea_software | radiusx | 4.0.71 |
| iea_software | radiusx | 4.0.72 |
| iea_software | radiusx | 4.0.73 |
| iea_software | radiusx | 4.0.74 |
| iea_software | radiusx | 4.0.75 |
| iea_software | radiusx | 4.0.76 |
| iea_software | radiusx | 4.0.77 |
| iea_software | radiusx | 4.0.79 |
| iea_software | radiusx | 4.0.80 |
| iea_software | radiusx | 4.0.81 |
| iea_software | radiusx | 4.0.82 |
| iea_software | radiusx | 4.0.83 |
| iea_software | radiusx | 4.0.84 |
| iea_software | radiusx | 4.0.85 |
| iea_software | radiusx | 4.0.86 |
| iea_software | radiusx | 4.0.87 |
| iea_software | radiusx | 4.0.88 |
| iea_software | radiusx | 4.0.193 |
| iea_software | radiusx | 5.0.4a:a |
| iea_software | radiusx | 5.0.7a:a |
| iea_software | radiusx | 5.0.8b:b |
| iea_software | radiusx | 5.0.9b:b |
| iea_software | radiusx | 5.0.10b:b |
| iea_software | radiusx | 5.0.13b:b |
| iea_software | radiusx | 5.0.15b:b |
| iea_software | radiusx | 5.0.17 |
| iea_software | radiusx | 5.0.22 |
| iea_software | radiusx | 5.0.27 |
| iea_software | radiusx | 5.0.29 |
| iea_software | radiusx | 5.0.31 |
| iea_software | radiusx | 5.0.35 |
| iea_software | radiusx | 5.0.36 |
| iea_software | radiusx | 5.0.38 |
| iea_software | radiusx | 5.0.39 |
| iea_software | radiusx | 5.0.42 |
| iea_software | radiusx | 5.0.43 |
| iea_software | radiusx | 5.0.45 |
| iea_software | radiusx | 5.0.49 |
| iea_software | radiusx | 5.0.50 |
| iea_software | radiusx | 5.0.54 |
| iea_software | radiusx | 5.0.55 |
| iea_software | radiusx | 5.0.57 |
| iea_software | radiusx | 5.0.58 |
| iea_software | radiusx | 5.1.3 |
| iea_software | radiusx | 5.1.4 |
| iea_software | radiusx | 5.1.5 |
| iea_software | radiusx | 5.1.6 |
| iea_software | radiusx | 5.1.10 |
| iea_software | radiusx | 5.1.15 |
| iea_software | radiusx | 5.1.16 |
| iea_software | radiusx | 5.1.17 |
| iea_software | radiusx | 5.1.19 |
| iea_software | radiusx | 5.1.24 |
| iea_software | radiusx | 5.1.25 |
| iea_software | radiusx | 5.1.29 |
| iea_software | radiusx | 5.1.35 |
| iea_software | radiusx | 5.1.38 |
| iea_software | radiusx | 5.1.40 |
| iea_software | radiusx | 5.1.41 |
| iea_software | radlogin | 4.0.15 |
| iea_software | radlogin | 4.0.20 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References