CVE-2008-5419
UnknownEPSS 7.73%
Last modified
CVE-2008-5419 is a vulnerability of currently unknown severity. Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.. EPSS estimates a 7.73% chance of exploitation in the next 30 days.
Description
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Emc | Control Center | 5.2 | Sp5 |
| Emc | Control Center | 6.0 | — |
References
- http://secunia.com/advisories/32801Vendor Advisory
- http://secunia.com/advisories/32801Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-5419?
Stack-based buffer overflow in SAN Manager Master Agent service (aka msragent.exe) in EMC Control Center 5.2 SP5 and 6.0 allows remote attackers to execute arbitrary code via multiple SST_CTGTRANS requests.
How severe is CVE-2008-5419?
Severity scoring for CVE-2008-5419 is pending analysis. The EPSS model estimates a 7.73% probability of exploitation in the next 30 days.
How do I fix CVE-2008-5419?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-5413PerfServlet in the PMI/Performance Tools component in IBM We…
- CVE-2008-5414Unspecified vulnerability in the Feature Pack for Web Servic…
- CVE-2008-5415The LDBserver service in the server in CA ARCserve Backup 11…
- CVE-2008-5416Heap-based buffer overflow in Microsoft SQL Server 2000 SP4,…
- CVE-2008-5417HP DECnet-Plus 8.3 before ECO03 for OpenVMS on the Alpha pla…
- CVE-2008-5418Directory traversal vulnerability in login.php in the PunPor…
- CVE-2008-5420The SAN Manager Master Agent service (aka msragent.exe) in E…
- CVE-2008-5421The SSL web administration service in NetWin SmsGate 1.1n an…
- CVE-2008-5422Sun Sun Ray Server Software 3.1 through 4.0 does not properl…
- CVE-2008-5423Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows …
- CVE-2008-5424The MimeOleClearDirtyTree function in InetComm.dll in Micros…
- CVE-2008-5425ESet NOD32 2.70.0039.0000 does not properly handle (1) multi…
Are you affected by CVE-2008-5419?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST