NVD

Id
1396  
Name
CVE-2008-1446  
Description
Integer overflow in the Internet Printing Protocol (IPP) ISAPI extension in Microsoft Internet Information Services (IIS) 5.0 through 7.0 on Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, and Server 2008 allows remote authenticated users to execute arbitrary code via an HTTP POST request that triggers an outbound IPP connection from a web server to a machine operated by the attacker, aka "Integer Overflow in IPP Service Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9  
Severity
High  
CVSS Base Score
9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2011-03-07  
Seq
2008-1446  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8987 1396 CVE-2008-1446 HPSBST02379  View
8988 1396 CVE-2008-1446 oval:org.mitre.oval:def:5764  View
8989 1396 CVE-2008-1446 VU#793233  View
8990 1396 CVE-2008-1446 MS08-062  View
8991 1396 CVE-2008-1446 31682  View
8992 1396 CVE-2008-1446 1021048  View
8993 1396 CVE-2008-1446 TA08-288A  View
8994 1396 CVE-2008-1446 ADV-2008-2813  View
8995 1396 CVE-2008-1446 win-ipp-service-code-execution(45545)  View
8996 1396 CVE-2008-1446 win-ms08kb953155-update(45548)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46560 JVNDB-2008-001870 Microsoft IIS の IPP ISAPI 拡張における HTTP POST リクエストの処理の不備による任意のコードを実行される脆弱性 Microsoft Internet Information Services (IIS) の Internet Printing Protocol (IPP) ISAPI 拡張には、HTTP POST リクエストの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-1446 31559 CVE-2008-1446 1396 9 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001870.html 2008-10-14 2008-11-18 View