NVD

Id
1496  
Name
CVE-2008-1552  
Description
The silc_pkcs1_decode function in the silccrypt library (silcpkcs1.c) in Secure Internet Live Conferencing (SILC) Toolkit before 1.1.7, SILC Client before 1.1.4, and SILC Server before 1.1.2 allows remote attackers to execute arbitrary code via a crafted PKCS#1 message, which triggers an integer underflow, signedness error, and a buffer overflow. NOTE: the researcher describes this as an integer overflow, but CVE uses the "underflow" term in cases of wraparound from unsigned subtraction.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-31  
Modified Date
2011-03-07  
Seq
2008-1552  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9658 1496 CVE-2008-1552 SUSE-SR:2008:008  View
9659 1496 CVE-2008-1552 GLSA-200804-27  View
9660 1496 CVE-2008-1552 3795  View
9661 1496 CVE-2008-1552 http://silcnet.org/general/news/?item=client_20080320_1  View
9662 1496 CVE-2008-1552 http://silcnet.org/general/news/?item=server_20080320_1  View
9663 1496 CVE-2008-1552 http://silcnet.org/general/news/?item=toolkit_20080320_1  View
9664 1496 CVE-2008-1552 http://www.coresecurity.com/?action=item&id=2206  View
9665 1496 CVE-2008-1552 MDVSA-2008:158  View
9666 1496 CVE-2008-1552 20080325 CORE-2007-1212: SILC pkcs_decode buffer overflow  View
9667 1496 CVE-2008-1552 28373  View
9668 1496 CVE-2008-1552 1019690  View
9669 1496 CVE-2008-1552 ADV-2008-0974  View
9670 1496 CVE-2008-1552 silc-silcpkcs1decode-bo(41474)  View
9671 1496 CVE-2008-1552 FEDORA-2008-2616  View
9672 1496 CVE-2008-1552 FEDORA-2008-2641  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
50325 JVNDB-2008-005635 SILC Toolkit などの silcpkcs1.c における任意のコードを実行される脆弱性 Secure Internet Live Conferencing (SILC) Toolkit、SILC Client および SILC Server の silccrypt library (silcpkcs1.c) の silc_pkcs1_decode 関数には、任意のコードを実行される脆弱性が存在します。 CVE-2008-1552 31665 CVE-2008-1552 1496 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005635.html 2008-03-31 2012-12-20 View