Back to Database
Status published
Medium
CVE-2008-1648
Sympa before 5.4 allows remote attackers to cause a denial...
Vulnerability Description
Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1648
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.vupen.com/english/advisories/2008/1080/references
- http://secunia.com/advisories/29575
- http://sourcesup.cru.fr/tracker/?func=detail&group_id=23&aid=3702&atid=167
- http://www.debian.org/security/2008/dsa-1600
- http://www.sympa.org/distribution/latest-stable/NEWS
- http://www.mandriva.com/security/advisories?name=MDVSA-2008:133
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41561
- http://www.securityfocus.com/bid/28539
- http://secunia.com/advisories/30910
More from sympa
View All →CVE-2021-46900
Sympa before 6.2.62 relies on a cookie parameter for certain...
Unknown
0
CVE-2020-9369
Sympa 6.2.38 through 6.2.52 allows remote attackers to cause a...
High
7.5
CVE-2020-29668
Sympa before 6.2.59b.2 allows remote attackers to obtain full SOAP...
Low
3.7
CVE-2020-26932
debian/sympa.postinst for the Debian Sympa package before 6.2.40~dfsg-7 uses mode...
Medium
4.3
CVE-2020-26880
Sympa through 6.2.57b.2 allows a local privilege escalation from the...
High
7.8
Affected Vendor
sympa
View all reports →Affected Software
sympa
Vulnerable Versions:
0.001, 0.002, 0.003, 0.004, 0.005, 0.006, 0.007, 0.008, 0.009, 0.010, 0.011, 1.2.0, 1.2.1, 1.2.2, 1.3.0, 1.3.1, 1.3.1-2, 1.3.2, 1.3.3, 1.3.4, 1.3.4-1, 1.4.0, 1.4.2, 1.4.2-1, 1.5, 2.2.1b, 2.2.2b, 2.2.3b, 2.2.4, 2.2.5, 2.2.6, 2.2.7, 2.2b, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3beta, 2.4, 2.5, 2.5.1, 2.5.2, 2.5.3b, 2.5.4b, 2.6, 2.6.1, 2.7, 2.7.1, 2.7.2, 2.7.3, 2.7a, 2.7b.1, 2.7b.2, 2.7b.3, 3.0, 3.0a, 3.0a.1, 3.0b.4, 3.0b.8, 3.0b.9, 3.1, 3.1.1, 3.1b.7, 3.1b.8, 3.1b.9, 3.1b.10, 3.1b.12, 3.1b.13, 3.2, 3.2.1, 3.2.2a, 3.3, 3.3.1, 3.3.3, 3.3.4b.3, 3.3.4b.4, 3.3.4b.5, 3.3.4b.6, 3.3.4b.7, 3.3.4b.8, 3.3.4b.9, 3.3.5, 3.3.6b.2, 3.3.6b.3, 3.3.6b.4, 3.3.6b.5, 3.3.6b.6, 3.3a-vhost.10, 3.3b.3, 3.3b.4, 3.4, 4.0, 4.0.a1, 4.0.a3, 4.0.a4, 4.0.a5, 4.0.a6, 4.0.a7, 4.0.a8, 4.0.a9, 4.0.b1, 4.0.b2, 4.0.b3, 4.1, 4.2b.1, 4.2b.3, 5.0, 5.0a, 5.0a.1, 5.0b, 5.0b.1, 5.1, 5.1.2, 5.2, 5.2b, 5.2b2, 5.3, 5.3.2, 5.3a.8, 5.3a.9, 5.3a.10, 5.3b.1, 5.3b.3, 5.3b.4, 5.3b.5, 5.4a.2, 5.4a.4, 5.4b.1
Timeline
Official Publish:
April 2nd, 2008
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.