// For flags

CVE-2008-0153

Pragma TelnetServer 7.0.4.589 - NULL-Pointer Dereference Denial of Service

Severity Score

5.0
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

1
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

telnetd.exe in Pragma TelnetServer 7.0.4.589 allows remote attackers to cause a denial of service (process crash and resource exhaustion) via a crafted TELOPT PRAGMA LOGON telnet option, which triggers a NULL pointer dereference.

telnetd.exe en Pragma TelnetServer 7.0.4.589 permite a atacantes remotos provoquen una denegación de servicio (por caída del proceso y agotamiento de recursos) a traves de una opción telnet TELOPT PRAGMA LOGON manipulada, que provoca la referencia a un puntero NULL

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
None
Confidentiality
None
Integrity
None
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2008-01-04 First Exploit
  • 2008-01-08 CVE Reserved
  • 2008-01-09 CVE Published
  • 2024-08-07 CVE Updated
  • 2024-11-12 EPSS Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-399: Resource Management Errors
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Pragma Systems
Search vendor "Pragma Systems"
 Pragma Telnetserver
Search vendor "Pragma Systems" for product "Pragma Telnetserver"
 7.0.4.589
Search vendor "Pragma Systems" for product "Pragma Telnetserver" and version "7.0.4.589"
-
Affected