Denial of Service and Code Execution Vulnerability in McAfee E-Business Server
CVE-2008-0127

Currently unrated

Key Information:

Vendor

Mcafee
Status
E-business Server
Vendor
CVE Published:
10 January 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 24%

What is CVE-2008-0127?

The administration interface in McAfee E-Business Server versions 8.5.2 and earlier is vulnerable to exploitation by remote attackers. By sending a specially crafted long initial authentication packet, these attackers can trigger a denial of service, causing the server to crash, and potentially execute arbitrary code. This vulnerability poses a significant risk to systems utilizing affected versions, warranting immediate attention and remediation.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-0127 - Proof of Concept

References

https://www.exploit-db.com/exploits/4878
exploitx_refsource_EXPLOIT-DB
http://securityreason.com/securityalert/3530
third-party-advisoryx_refsource_SREASON
http://www.vupen.com/english/advisories/2008/0087
vdb-entryx_refsource_VUPEN

EPSS Score

24% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.