Vulnerabilities > CVE-2008-0974 - Resource Management Errors vulnerability in multiple products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value, which raises a "vector<T> too long" exception; or (2) a certain packet that raises an ospace/time/src\date.cpp exception.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 |
Common Weakness Enumeration (CWE)
Statements
| contributor | |
| lastmodified | 2009-05-08 |
| organization | Double-Take |
| statement | This issue was fixed in version 5.1 which was released July 11, 2008 |
References
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
- http://aluigi.org/poc/doubletakedown.zip
- http://secunia.com/advisories/29075
- http://securityreason.com/securityalert/3698
- http://www.securityfocus.com/archive/1/488632/100/0/threaded
- http://www.securityfocus.com/bid/27951
- http://www.vupen.com/english/advisories/2008/0666