CVE-2008-2363

Published: Jun 2, 2008Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

The PartsBatch class in Pan 0.132 and earlier does not properly manage the data structures for Parts batches, which allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a crafted .nzb file that triggers a heap-based buffer overflow.

Affected (28)

Products: Pan: Pan

1 product

Configuration A

28 vulnerable

Vulnerable Software	Affected Versions
Pan Pan	Up to 0.132
Pan Pan	Version 0.105
Pan Pan	Version 0.106
Pan Pan	Version 0.107
Pan Pan	Version 0.108
Pan Pan	Version 0.109
Pan Pan	Version 0.110
Pan Pan	Version 0.111
Pan Pan	Version 0.112
Pan Pan	Version 0.113
Pan Pan	Version 0.114
Pan Pan	Version 0.115
Pan Pan	Version 0.116
Pan Pan	Version 0.117
Pan Pan	Version 0.118
Pan Pan	Version 0.119
Pan Pan	Version 0.120
Pan Pan	Version 0.121
Pan Pan	Version 0.122
Pan Pan	Version 0.123
Pan Pan	Version 0.124
Pan Pan	Version 0.125
Pan Pan	Version 0.126
Pan Pan	Version 0.127
Pan Pan	Version 0.128
Pan Pan	Version 0.129
Pan Pan	Version 0.130
Pan Pan	Version 0.131

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (22)

http://bugs.gentoo.org/show_bug.cgi?id=224051

Source: secalert@redhat.com

Patch

http://bugzilla.gnome.org/show_bug.cgi?id=535413

Source: secalert@redhat.com

Patch

http://marc.info/?l=oss-security&m=121207185600564&w=2

Source: secalert@redhat.com

Patch

http://secunia.com/advisories/30717

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/31315

Source: secalert@redhat.com

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200807-15.xml

Source: secalert@redhat.com

http://www.mandriva.com/security/advisories?name=MDVSA-2008:201

Source: secalert@redhat.com

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: secalert@redhat.com

http://www.securityfocus.com/bid/29421

Source: secalert@redhat.com

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=446902

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/42750

Source: secalert@redhat.com

http://bugs.gentoo.org/show_bug.cgi?id=224051

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://bugzilla.gnome.org/show_bug.cgi?id=535413

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://marc.info/?l=oss-security&m=121207185600564&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://secunia.com/advisories/30717

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/31315

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://security.gentoo.org/glsa/glsa-200807-15.xml

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2008:201

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.novell.com/linux/security/advisories/2008_13_sr.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/29421

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://bugzilla.redhat.com/show_bug.cgi?id=446902

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/42750

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.