NVD

Id
4098  
Name
CVE-2008-4250  
Description
The Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, Server 2008, and 7 Pre-Beta allows remote attackers to execute arbitrary code via a crafted RPC request that triggers the overflow during path canonicalization, as exploited in the wild by Gimmiv.A in October 2008, aka "Server Service Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-23  
Modified Date
2012-10-30  
Seq
2008-4250  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
26114 4098 CVE-2008-4250 http://blogs.securiteam.com/index.php/archives/1150  View
26115 4098 CVE-2008-4250 HPSBST02386  View
26116 4098 CVE-2008-4250 oval:org.mitre.oval:def:6093  View
26117 4098 CVE-2008-4250 VU#827267  View
26118 4098 CVE-2008-4250 MS08-067  View
26119 4098 CVE-2008-4250 6824  View
26120 4098 CVE-2008-4250 6841  View
26121 4098 CVE-2008-4250 7104  View
26122 4098 CVE-2008-4250 7132  View
26123 4098 CVE-2008-4250 20081026 Windows RPC MS08-067 FAQ document released  View
26124 4098 CVE-2008-4250 20081027 Windows RPC MS08-067 FAQ document updated  View
26125 4098 CVE-2008-4250 31874  View
26126 4098 CVE-2008-4250 1021091  View
26127 4098 CVE-2008-4250 TA08-297A  View
26128 4098 CVE-2008-4250 TA09-088A  View
26129 4098 CVE-2008-4250 ADV-2008-2902  View
26130 4098 CVE-2008-4250 win-server-rpc-code-execution(46040)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46584 JVNDB-2008-001894 Microsoft Windows の Server サービスにおける RPC リクエストに関する任意のコードを実行される脆弱性 Microsoft Windows の Server サービスには、RPC リクエストの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-4250 34363 CVE-2008-4250 4098 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001894.html 2008-10-23 2008-11-26 View