Vulnerabilities > CVE-2008-0977 - Resource Management Errors vulnerability in Double-Take Software Double-Take 4.5/5.0.0.2865
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
NONE Availability impact
PARTIAL Summary
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Common Weakness Enumeration (CWE)
Statements
| contributor | |
| lastmodified | 2009-05-08 |
| organization | Double-Take |
| statement | This issue was fixed in version 5.1 which was released July 11, 2008 |
References
- http://aluigi.altervista.org/adv/doubletakedown-adv.txt
- http://aluigi.org/poc/doubletakedown.zip
- http://secunia.com/advisories/29075
- http://securityreason.com/securityalert/3698
- http://www.securityfocus.com/archive/1/488632/100/0/threaded
- http://www.securityfocus.com/bid/27951
- http://www.vupen.com/english/advisories/2008/0666