Denial of Service Vulnerability in Acronis Snap Deploy PXE Server
CVE-2008-1411

Currently unrated

Key Information:

Vendor

Acronis
Status
Snap Deploy
Vendor
CVE Published:
20 March 2008

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 10%

What is CVE-2008-1411?

The PXE Server (pxesrv.exe) in Acronis Snap Deploy versions 2.0.0.1076 and earlier is subject to a vulnerability that allows remote attackers to cause a denial of service condition. This is achieved through an incomplete TFTP request that results in a NULL pointer dereference, effectively crashing the service and impacting the availability of the server for legitimate users.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2008-1411 - Proof of Concept

References

http://aluigi.altervista.org/adv/acropxe-adv.txt
x_refsource_MISC
http://www.vupen.com/english/advisories/2008/0814/references
vdb-entryx_refsource_VUPEN
http://www.securityfocus.com/bid/28182
vdb-entryx_refsource_BID

EPSS Score

10% chance of being exploited in the next 30 days.

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.