Vulnerabilities > CVE-2008-0976 - Resource Management Errors vulnerability in multiple products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a malformed packet, as demonstrated by a packet of type (1) 0x2722 or (2) 0x272a.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 | |
| Application | 1 |
Common Weakness Enumeration (CWE)
Statements
| contributor | |
| lastmodified | 2009-05-08 |
| organization | Double-Take |
| statement | This issue was fixed in version 5.1 which was released July 11, 2008 |
References
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
- http://aluigi.org/poc/doubletakedown.zip
- http://secunia.com/advisories/29075
- http://securityreason.com/securityalert/3698
- http://www.securityfocus.com/archive/1/488632/100/0/threaded
- http://www.securityfocus.com/bid/27951
- http://www.vupen.com/english/advisories/2008/0666