CVE-2008-5284 - CVE House
Back to Database
Status published Critical CVE-2008-5284

The web server in IEA Software RadiusNT and RadiusX 5.1.38...

Vulnerability Description

The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-5284

Credits & Attribution

No credits recorded in the NVD database.

References

Affected Vendor

iea software

View all reports →

Affected Software

air marshal, emerald, radius test client, radiusnt, radiusx, radlogin
Vulnerable Versions:
1.0.3, 1.0.4, 1.0.5, 1.0.6, 1.0.7, 1.0.8, 1.0.9, 1.0.10, 1.0.11, 1.0.15, 1.0.16, 1.0.18, 1.0.19, 1.0.20, 1.0.21, 1.0.22, 2.0.0, 2.0.0.b.7, 2.0.0.b1, 2.0.1, 2.0.3, 2.0.4, 2.0.5, 5.0.24, 5.0.25, 5.0.26, 5.0.27, 5.0.28, 5.0.29, 5.0.30, 5.0.31, 5.0.32, 5.0.33, 5.0.35, 5.0.36, 5.0.37, 5.0.39, 5.0.40, 5.0.41, 5.0.42, 5.0.44, 5.0.46, 5.0.48, 5.0.49, 5.0.50, 5.0.51, 4.0.15, 4.0.20, 0, 3.0.145, 3.0.147, 3.0.149, 3.0.150, 3.0.154, 3.0.158, 3.0.162, 3.0.167, 3.0.168, 3.0.171, 3.0.172, 3.0.173, 3.0.174, 3.0.175, 3.0.176, 3.0.177, 3.0.178, 3.0.179, 3.0.182, 3.0.183, 3.0.184, 3.0.185, 3.0.186, 3.0.188, 3.0.189, 3.0.190, 3.0.191, 4.0.1, 4.0.2, 4.0.3, 4.0.5, 4.0.6, 4.0.7, 4.0.8, 4.0.10, 4.0.11, 4.0.12, 4.0.13, 4.0.14, 4.0.17, 4.0.21, 4.0.23, 4.0.24, 4.0.26, 4.0.27, 4.0.28, 4.0.29, 4.0.30, 4.0.31, 4.0.32, 4.0.33, 4.0.34, 4.0.35, 4.0.38, 4.0.39, 4.0.40, 4.0.41, 4.0.43, 4.0.44, 4.0.47, 4.0.49, 4.0.51, 4.0.54, 4.0.55, 4.0.56, 4.0.57, 4.0.59, 4.0.60, 4.0.62, 4.0.63, 4.0.67, 4.0.68, 4.0.69, 4.0.70, 4.0.71, 4.0.72, 4.0.73, 4.0.74, 4.0.75, 4.0.76, 4.0.77, 4.0.79, 4.0.80, 4.0.81, 4.0.82, 4.0.83, 4.0.84, 4.0.85, 4.0.86, 4.0.193, 4.09, 5.0.4a, 5.0.7a, 5.0.8b, 5.0.9b, 5.0.10b, 5.0.13b, 5.0.15b, 5.0.17, 5.0.22, 5.0.38, 5.0.43, 5.0.45, 5.0.54, 5.0.55, 5.0.58, 5.1.3, 5.1.4, 5.1.5, 5.1.6, 5.1.10, 5.1.15, 5.1.16, 5.1.17, 5.1.19, 5.1.24, 5.1.25, 5.1.29, 5.1.35, 5.1.38, 5.1.40, 5.1.41, 4.0.9, 4.0.87, 4.0.88, 5.0.57

Timeline

Official Publish: November 29th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.