FKIE_CVE-2008-0978

Vulnerability from fkie_nvd - Published: 2008-02-25 23:44 - Updated: 2026-06-16 22:50
Severity
Summary
Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/doubletakedown-adv.txt
cve@mitre.orghttp://aluigi.org/poc/doubletakedown.zip
cve@mitre.orghttp://secunia.com/advisories/29075
cve@mitre.orghttp://securityreason.com/securityalert/3698
cve@mitre.orghttp://www.securityfocus.com/archive/1/488632/100/0/threaded
cve@mitre.orghttp://www.securityfocus.com/bid/27951
cve@mitre.orghttp://www.vupen.com/english/advisories/2008/0666
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/doubletakedown-adv.txt
af854a3a-2127-422b-91ae-364da2661108http://aluigi.org/poc/doubletakedown.zip
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/29075
af854a3a-2127-422b-91ae-364da2661108http://securityreason.com/securityalert/3698
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/488632/100/0/threaded
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/27951
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2008/0666
Impacted products
Vendor Product Version
double-take_software double-take 4.5
double-take_software double-take 5.0.0.2865
To clipboard 

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:double-take_software:double-take:4.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "F178F692-773F-4D8A-BA9C-78D448126649",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:double-take_software:double-take:5.0.0.2865:*:*:*:*:*:*:*",
              "matchCriteriaId": "36F54C9F-55AA-4171-80E1-3B7F978B51AF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to obtain sensitive information via a packet of type (1) 0x2728, which provides operating system and path information; (2) 0x274e, which lists Ethernet adapters; (3) 0x2726, which provides filesystem information; (4) 0x274f, which specifies the printer driver; or (5) 0x2757, which provides recent log entries."
    },
    {
      "lang": "es",
      "value": "Double-Take 5.0.0.2865 y anteriores, distribuido con el nombre de HP StorageWorks Storage Mirroring y otros nombres, permite a atacantes remotos obtener informaci\u00f3n sensible a trav\u00e9s de un paquete del tipo 1) 0x2728, que proporciona informaci\u00f3n del sistema operativo y de la ruta; (2) 0x274e, que lista los adaptadores Ethernet; (3) 0x2726, que proporciona informaci\u00f3n del sistema de archivos (filesystem); (4) 0x274f, que especifica el controlador de la impresora; o (5) 0x2757, que proporciona entradas del log recientes."
    }
  ],
  "id": "CVE-2008-0978",
  "lastModified": "2026-06-16T22:50:43.333",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "NONE",
          "baseScore": 5.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2008-02-25T23:44:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://aluigi.altervista.org/adv/doubletakedown-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://aluigi.org/poc/doubletakedown.zip"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/29075"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/3698"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/archive/1/488632/100/0/threaded"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/27951"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2008/0666"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://aluigi.altervista.org/adv/doubletakedown-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://aluigi.org/poc/doubletakedown.zip"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/29075"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/3698"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/archive/1/488632/100/0/threaded"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/27951"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2008/0666"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vendorComments": [
    {
      "comment": "These findings indicate risk only in a situation where a customer\u2019s network security infrastructure has been breached. Double-Take is committed to continually improving the security of our products, and these findings will be addressed in a future release.",
      "lastModified": "2009-06-12T00:00:00",
      "organization": "Double-Take"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.