CVE-2008-2158
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent...
CVE-2008-2158 is a high vulnerability (CVSS 10.0) in Emc Corporation Alphastor, published May 29, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 58.4%, the 99th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 58.4%EPSS, 99th percentile
- Exploitation
- None known2 public exploits
- Fixed in
- No fix listedNo source names one
Description
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Metasploit | EMC AlphaStor Agent Buffer Overflow | 2008-05-27 |
| Exploit-DB | EMC AlphaStor Agent - Remote Buffer Overflow (Metasploit) | 2010-05-09 |
What each source reports
NVD Score used
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
- Record
CVE-2008-2158- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
- Record
CVE-2008-2158- Updated
- 2026-11-02
EUVDEUVD-2008-2155No score
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
- Record
EUVD-2008-2155- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r5jj-3mj4-jv97No score
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent...
Multiple stack-based buffer overflows in the Command Line Interface process in the Server Agent in EMC AlphaStor 3.1 SP1 for Windows allow remote attackers to execute arbitrary code via crafted TCP packets to port 41025.
- Record
GHSA-r5jj-3mj4-jv97- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| exploits, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, Metasploit, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
labs.idefense.com/intelligence/vulnerabilities/display.php?id=702
securitytracker.com/id?1020115
secunia.com/advisories/30410
securityfocus.com/bid/29399
vupen.com/english/advisories/2008/1670
exchange.xforce.ibmcloud.com/vulnerabilities/42669
nvd.nist.gov/vuln/detail/CVE-2008-2158
github.com/advisories/GHSA-r5jj-3mj4-jv97