CVE-2008-0550
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-0550
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Off-by-one error in Steamcast 0.9.75 and earlier allows remote attackers to cause a denial of service (daemon crash) or execute arbitrary code via a certain HTTP request that leads to a buffer overflow, as demonstrated by a long User-Agent header.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Steamcast Off-by-one 错误 缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Steamcast 0.9.75 及其早期版本中的Off-by-one error会允许远程攻击者通过某个可以导致缓冲区溢出的HTTP请求(例如一个长的User-Agent页眉)来造成服务拒绝(后台程序失败)或执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Shenlong Deep Dive — AI Deep Analysis
10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-0550
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-0550
请登录查看更多情报信息。
- http://aluigi.org/poc/steamcazz.zipx_refsource_MISC
- http://aluigi.altervista.org/adv/steamcazz-adv.txtx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2008-0550
Same Patch Batch · n/a · 2008-02-01 · 19 CVEs total
| CVE-2008-0543 | Pre Dynamic Institution "login.asp" 和 "siteadmin/login.asp" 多个SQL注入漏洞 | |
| CVE-2008-0552 | eTicket 'index.php'跨站脚本攻击漏洞 | |
| CVE-2008-0551 | Namo web Editor NamoInstaller.dll ActiveX控件任意命令执行漏洞 | |
| CVE-2008-0549 | radio_toolbox steamcast 的OggHeaderParse 函数 数字错误漏洞 | |
| CVE-2008-0548 | radio_toolbox steamcast Content-Length HTTP头 拒绝服务攻击漏洞 | |
| CVE-2008-0547 | CandyPress admin/utilities_ConfigHelp.asp 跨站脚本攻击漏洞 | |
| CVE-2008-0546 | CandyPress 多个SQL注入漏洞 | |
| CVE-2008-0545 | Bubbling Library 多个参数 目录遍历漏洞 | |
| CVE-2008-0544 | SDL_image IMG_LoadLBM_RW function 远程缓冲区溢出漏洞 | |
| CVE-2007-6698 | OpenLDAP NOOP control 拒绝服务漏洞 | |
| CVE-2008-0542 | Gerd Tentler Simple Forum thumbnail.php 目录遍历漏洞 | |
| CVE-2008-0541 | Gerd Tentler Simple Forum forum.php 多个跨站脚本攻击漏洞 | |
| CVE-2008-0540 | trixbox 'index.php' 多个跨站脚本攻击漏洞 | |
| CVE-2008-0539 | F5 BIG-IP 跨站脚本漏洞 | |
| CVE-2008-0538 | phpip_management 多个SQL注入漏洞 | |
| CVE-2007-6697 | SDL_image无效GIF文件LWZ Minimum Code Size远程缓冲区溢出漏洞 | |
| CVE-2007-6696 | webCalendar 多个跨站脚本攻击漏洞 | |
| CVE-2007-6695 | Drake CMS 'index.php'跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2008-0550
No comments yet