CVE-2008-6737
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2008-6737
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Ea Crysis keyexchange报文信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Crysis是由Crytek开发的第一人称射击游戏。 Crysis在处理畸形格式的用户请求时存在漏洞，如果远程用户未经首先发送加入游戏报文(0x07)便向Crysis服务器发送了keyexchange报文(0x8c)的话，服务器就会响应包含有KeyExchange1 with no connection错误消息的disconnect报文(0x08)，之后为16行的内部日志，日志中包含有各种实时信息，如IP地址、昵称、客户端状态等敏感信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2008-6737
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-6737
Please Login to view more intelligence information
- http://aluigi.altervista.org/adv/crysislog-adv.txtx_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2008-6737
Same Patch Batch · n/a · 2009-04-21 · 26 CVEs total
| CVE-2009-1350 | Novell NetIdentity "xtagent.exe" 远程代码执行漏洞 | |
| CVE-2009-1349 | RedHat C2Net Stronghold Web服务器跨站脚本漏洞 | |
| CVE-2009-1266 | Wireshark 未明漏洞 | |
| CVE-2009-0718 | HP StorageWorks Storage Mirroring 执行任意代码漏洞 | |
| CVE-2009-0717 | HP StorageWorks Storage Mirroring 远程拒绝服务漏洞 | |
| CVE-2009-0716 | HP StorageWorks Storage Mirroring 未明漏洞 | |
| CVE-2009-0715 | HP Storage Essentials "Secure NaviCLI" 未明远程特权提升漏洞 | |
| CVE-2009-1356 | Elecard AVC HD Player '.xpl'文件中远程栈缓冲区溢出漏洞 | |
| CVE-2009-1355 | IBM AIX安全漏洞 | |
| CVE-2009-1354 | Mongoose目录遍历漏洞 | |
| CVE-2009-1353 | Zervit Webserver libz/misc.c栈溢出漏洞 | |
| CVE-2009-1352 | Dawningsoft PowerCHM 栈缓冲区溢出漏洞 | |
| CVE-2009-1351 | Apollo m3u播放列表文件处理堆溢出漏洞 | |
| CVE-2009-1358 | apt apt-get 安全漏洞 | |
| CVE-2008-6742 | Gofoxy Foxy P2P 'foxy URI'远程拒绝服务漏洞 | |
| CVE-2008-6741 | Simple Machines Forum 'load.php'SQL注入漏洞 | |
| CVE-2008-6740 | HoMaP-CMS 'plugin_admin.php'PHP远程文件包含漏洞 | |
| CVE-2008-6739 | Todd Woolums ASP下载管理脚本 'setupdownload.asp'授权问题漏洞 | |
| CVE-2008-6738 | Mark_Girling MyShoutPro 'admin_access'Cookie参数身份认证绕过漏洞 | |
| CVE-2008-6736 | Circulargenius Flat Calendar多个管理脚本身份认证绕过漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8226
Open5GS types.c ogs_pcc_rule_install_flow_from_media denial - CVE-2026-8225
Open5GS delete Endpoint sm-sm.c pcf_npcf_smpolicycontrol_han - CVE-2026-8224
Open5GS PCF context.c pcf_sess_set_ipv6prefix denial of serv - CVE-2026-8223
Open5GS sm-policies Endpoint pcf_sess_sbi_discover_and_send - CVE-2026-8222
Open5GS sm-policies Endpoint nbsf-handler.c pcf_nbsf_managem
V. Comments for CVE-2008-6737
No comments yet