Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-2780

EPSS 0.33% · P56
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-2780

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The Anubis (aka Anubis+Ripe160) plugin before 1.3 for encrypt stores the unencrypted file's size in cleartext in the header of the encrypted file, which allows attackers to distinguish between encrypted data and random padding at the end of the encrypted file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
albinoloverats anubis 插件加密文件头部加密问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
1.3版本之前的Anubis (aka Anubis+Ripe160) 插件在加密文件的头部上的cleartext储存未加密的文件的大小，远程攻击者可以区分加密的数据并在每个加密文件后随即填充。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-2780

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-2780

Please Login to view more intelligence information

Same Patch Batch · n/a · 2008-06-19 · 13 CVEs total

CVE-2008-2785Firefox CSSValue数组数据结构远程代码执行漏洞
CVE-2008-2786Mozilla Firefox 3 恶意网页缓冲区溢出漏洞
CVE-2008-2774cartkeeper ckgold_shopping_cart item.php SQL注入漏洞
CVE-2008-2775dt_centrepiece search.asp SQL注入漏洞
CVE-2008-2776dt_centrepiece search.asp 跨站脚本攻击漏洞
CVE-2008-2777luca_corbo ortro 未明跨站脚本攻击漏洞
CVE-2008-2778RevokeBB Search System inc/class_search.php SQL注入漏洞
CVE-2008-2779globalscape cuteftp LIST命令目录遍历漏洞
CVE-2008-2781DZOIC Handshakes index.php SQL注入漏洞
CVE-2008-2782Otomigenx 多个目录遍历漏洞
CVE-2008-2783Horde Groupware/Groupware Webmail Edition/Kronolith 多个跨站脚本漏洞
CVE-2008-2784Spamdyke spamdykedoes smtp_filter 权限许可和访问控制漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-2780

No comments yet

Leave a comment