CVE-2008-3349
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Data .TAP是基于Unix改装而来的Unix类操作系统。 NetApp Data ONTAP存在多个未明漏洞。当在NetApp和IBM eServer平台上使用时，远程攻击者可以执行任意指令，引起拒绝服务(系统崩溃)，或获得敏感信息。该漏洞可能与HTTP请求的访问控制缺陷有关，可能与CVE-2008-3160交互。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2008-3349
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Multiple unspecified vulnerabilities in NetApp Data ONTAP, as used on NetApp and IBM eServer platforms, allow remote attackers to execute arbitrary commands, cause a denial of service (system crash), or obtain sensitive information, probably related to insufficient access control for HTTP requests. NOTE: this may overlap CVE-2008-3160.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
NetApp DATA ONTAP 拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Data .TAP是基于Unix改装而来的Unix类操作系统。 NetApp Data ONTAP存在多个未明漏洞。当在NetApp和IBM eServer平台上使用时，远程攻击者可以执行任意指令，引起拒绝服务(系统崩溃)，或获得敏感信息。该漏洞可能与HTTP请求的访问控制缺陷有关，可能与CVE-2008-3160交互。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2008-3349
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2008-3349
请登录查看更多情报信息。
Vendor Advisories for CVE-2008-3349 (2)
Other References for CVE-2008-3349 (2)
-
http://now.netapp.com/NOW/products/cpc/cpc0807-02.shtml x_refsource_MISC
-
http://now.netapp.com/NOW/products/cpc/cpc0807-01.shtml x_refsource_MISC
Same Patch Batch · n/a · 2008-07-28 · 22 CVEs total
| CVE-2008-3355 | Camera Life 'sitemap.xml.php' SQL注入漏洞 | |
| CVE-2008-3348 | MyioSoft EasyDynamicPages 'index.php' 跨站脚本漏洞 | |
| CVE-2008-3347 | MyioSoft EasyDynamicPages 'index.php'SQL注入漏洞 | |
| CVE-2008-3346 | E-topbiz Shopcart DX 'product_detail.php' SQL注入漏洞 | |
| CVE-2008-3345 | EasyE-Cards多个SQL注入及跨站脚本漏洞 | |
| CVE-2008-3344 | EasyE-Cards多个SQL注入及跨站脚本漏洞 | |
| CVE-2008-3343 | MyioSoft EasyDynamicPages 'index.php'SQL注入漏洞 | |
| CVE-2008-3342 | MyioSoft EasyDynamicPages 'index.php'跨站脚本漏洞 | |
| CVE-2008-3341 | Jobbex JobSite 'search_result' SQL注入漏洞 | |
| CVE-2008-3340 | Jobbex JobSite 'search_result'跨站脚本漏洞 | |
| CVE-2008-3339 | Jobbex JobSite 'search_result.cfm'信息泄露漏洞 | |
| CVE-2007-5400 | RealNetworks RealPlayer SWF文件处理堆溢出漏洞 | |
| CVE-2008-3354 | RunCMS Newbb Plus module 文件包含漏洞 | |
| CVE-2008-3353 | Pure Software Lore 多个跨站脚本攻击漏洞 | |
| CVE-2008-3352 | Nersoft Live_music_plus SQL注入漏洞 | |
| CVE-2008-3351 | Atomphotblog 'atomPhotoBlog.php' SQL注入漏洞 | |
| CVE-2008-3350 | Dnsmasq DCHP Lease 多个远程拒绝服务漏洞 | |
| CVE-2008-3323 | Cygwin setup.exe安装及升级过程数据验证漏洞 | |
| CVE-2008-3066 | RealPlayer rjbdll.dll ActiveX控件Import方式栈溢出漏洞 | |
| CVE-2008-3064 | RealPlayer未明本地资源参照漏洞 |
Showing top 20 of 22 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2008-3349
No comments yet