CVE-2008-5284

Published Nov 29, 2008 CVSS 2.0 · 10.0 Critical EPSS 4.4% KEV · Not listed
Description
The web server in IEA Software RadiusNT and RadiusX 5.1.38 and other versions before 5.1.44, Emerald 5.0.49 and other versions before 5.0.52, Air Marshal 2.0.4 and other versions before 2.0.8, and Radius test client (aka Radlogin) 4.0.20 and earlier, allows remote attackers to cause a denial of service (crash) via an HTTP Content-Length header with a negative value, which triggers a single byte overwrite of memory using a NULL terminator. NOTE: some of these details are obtained from third party information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Aug 7, 2024, 10:49 AM
Reserved
Nov 28, 2008, 12:00 AM
Status
Modified
Published
Nov 29, 2008, 2:30 AM
Modified
Jun 16, 2026, 10:59 PM