CVE-2008-2541

CVE-2008-2541 describes multiple stack-based buffer overflows in the HTTP Gateway Service (icihttp.exe) of CA eTrust Secure Content Manager 8.0. These vulnerabilities allow remote attackers to execute arbitrary code or cause a denial of service through specially crafted long FTP responses, specifically impacting LIST and PASV commands. The vulnerability carries a critical CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. Its FAUCET Risk Score of 94/100 further emphasizes its high potential impact. Despite its high severity, there is no evidence of active exploitation (KEV: No) and no known public exploit code (Metasploit, Nuclei, ExploitDB: None). Community discussion and media coverage are also absent, suggesting a lack of widespread attention or exploitation in the wild.