Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2008-3834

EPSS 1.85% · P83
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-3834

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The dbus_signature_validate function in the D-bus library (libdbus) before 1.2.4 allows remote attackers to cause a denial of service (application abort) via a message containing a malformed signature, which triggers a failed assertion error.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
D-Bus dbus_signature_validate()函数类型签名拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat D-BUS(也称DBus)是美国红帽(Red Hat)公司的一个免费的消息总线模块,它提供了简单应用程序互相通讯的途径,是freedesktop.org项目的一部分。 D-BUS的_dbus_validate_signature_with_reason()函数没有正确地验证类型代码,远程攻击者利用畸形的签名信息,将会造成拒绝服务攻击,则将会引发验证声明错误.
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-3834

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-3834

登录查看更多情报信息。

Same Patch Batch · n/a · 2008-10-07 · 28 CVEs total

CVE-2008-4470Numark CUE 5 '.m3u' 文件缓冲区溢出和拒绝服务漏洞
CVE-2008-3061v-webmail 'redirect.php' 漏洞开放重定向漏洞
CVE-2008-4477Mon 'alert.d/test.alert' 不安全临时文件创建漏洞
CVE-2008-3063v-webmail 'login.php' SQL注入漏洞
CVE-2008-3060v-webmail 'local.hooks.php'和无效ID信息泄露漏洞
CVE-2008-4476Sympa 'sympa.pl' 不安全临时文件创建漏洞
CVE-2008-4475gnu ibackup 后置符号链接漏洞
CVE-2008-4474FreeRADIUS Dialup Admin 'freeradius-dialupadmin' 不安全临时文件创建漏洞
CVE-2008-4472autodesk design_review LiveUpdate ActiveX UpdateEngine类存在权限许可和访问控制漏洞
CVE-2008-4471autodesk design review DWF Viewer ActiveX CExpressViewerControl类中存在路径遍历漏洞
CVE-2008-4421MetaGauge Web Server 目录遍历漏洞
CVE-2008-4393VeriSign Kontiki Delivery Management System 'action' 参数跨站脚本攻击漏洞
CVE-2008-4384iseemedia 'LPControl.dll' LPViewer ActiveX控件多个栈溢出漏洞
CVE-2008-3543hp oncplus 未明拒绝服务攻击漏洞
CVE-2008-4457MemHT Portal 'inc_statistics.php' SQL注入漏洞
CVE-2008-4469Vastal I-Tech Freelance Zone 'view_cresume.php' SQL注入漏洞
CVE-2008-4468Vastal I-Tech Share Zone 'view_news.php' SQL注入漏洞
CVE-2008-4467Vastal I-Tech Toner Cart 'show_series_ink.php'SQL注入漏洞
CVE-2008-4466Vastal I-Tech Cosmetics Zone 'view_products_cat.php' SQL注入漏洞
CVE-2008-4465Vastal I-Tech DVD Zone 'view_mags.php' SQL注入漏洞

Showing top 20 of 28 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2008-3834

No comments yet


Leave a comment