Acronis True Image Echo Enterprise Server Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	28169
Class:	Unknown
CVE:	CVE-2008-1280 CVE-2008-1279
Remote:	Yes
Local:	No
Published:	Mar 10 2008 12:00AM
Updated:	Jul 06 2016 02:17PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Acronis True Image Echo Enterprise Server 9.5.0.8072
Not Vulnerable:

Acronis True Image Echo Enterprise Server Multiple Remote Denial of Service Vulnerabilities

Acronis True Image Echo Enterprise Server is prone to multiple remote denial-of-service vulnerabilities.

An attacker can exploit these issues to crash the affected application, denying service to legitimate users.

Acronis True Image Echo Enterprise Server Multiple Remote Denial of Service Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/28169.txt

Acronis True Image Echo Enterprise Server Multiple Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Acronis True Image Echo Enterprise Server Multiple Remote Denial of Service Vulnerabilities

References:

• Acronis True Image Echo Enterprise Server Homepage (Acronis)
  
• Acronis True Image Group NULL pointer (Luigi Auriemma)
  
• Acronis True Image Group Server Memory Access (Luigi Auriemma)
  
• Invalid memory access in Acronis True Image Group Server 1.5.19.191 (Luigi Auriemma )
  
• NULL pointer in Acronis True Image Windows Agent 1.0.0.54 (Luigi Auriemma )