CVE-2008-0401

CVE-2008-0401 describes a critical buffer overflow vulnerability in the logging functionality of the HTTP server within IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) versions prior to 5.1.0.3 Interim Fix 3. This flaw allows unauthenticated remote attackers to trigger a denial of service by crashing the daemon or potentially execute arbitrary code by sending an HTTP request with an excessively long method string to port 443/tcp. The vulnerability carries a maximum CVSS score of 10.0, indicating a severe risk with a network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its high FAUCET Risk Score of 96/100 further emphasizes its critical nature. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting a lack of widespread attention.