Buffer overflow in Emc_corporation Alphastor
CVE-2008-2158
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
Vulnerability class: Buffer Overflow
EPSS: 0.584 (99.0th percentile) — read the EPSS interpretation.
Affected products
- Emc_corporation Alphastor — versions 3.1_sp1
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (x_refsource_IDEFENSE, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (vdb-entry, x_refsource_XF)
Frequently asked questions
- What is CVE-2008-2158?
- CVE-2008-2158 is a vulnerability in Emc_corporation Alphastor, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2008-05-29.
- Is CVE-2008-2158 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.