CVE-2008-1411 Null dereference in n/a
Remote attackers can crash the Acronis Snap Deploy PXE server by sending incomplete TFTP requests, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-1411?
CVE-2008-1411 is a medium-severity vulnerability in n/a, published on 20 Mar 2008. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service (crash) via an incomplete TFTP request, which triggers a NULL pointer dereference.
Weakness: CWE-20
Which versions are affected by CVE-2008-1411?
It affects 1 product.
Products include Acronis Snap Deploy.
How do I fix CVE-2008-1411?
No fix has been published for CVE-2008-1411 yet. Limit exposure of the affected software until one is available.
Is CVE-2008-1411 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-1411 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
- CVE-2022-30695 Local privilege escalation due to excessive permissions assigned to child processes
- CVE-2022-30696 Local privilege escalation due to a DLL hijacking vulnerability
- CVE-2022-30697 Local privilege escalation due to insecure folder permissions
- CVE-2024-34017 Privilege escalation in Acronis Snap Deploy
- CVE-2024-34019 Privilege escalation in Acronis Snap Deploy
Sources
Also known as GHSA-jcxc-fp4m-25j7.