CVE-2008-1310

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=120457602310315&w=2
http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt
http://secunia.com/advisories/29207
http://www.emediawire.com/releases/2008/2/prweb731563.htm
http://www.securityfocus.com/bid/28078
https://exchange.xforce.ibmcloud.com/vulnerabilities/40979

Configurations

Configuration 1 (hide)

cpe:2.3:a:packettrap:pt360_tool_suite:1.1.33.1.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2008-03-12 17:44

Updated : 2024-02-04 17:33

NVD link : CVE-2008-1310

Mitre link : CVE-2008-1310

CVE.ORG link : CVE-2008-1310

JSON object : View

Products Affected

packettrap

pt360_tool_suite

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2008-1310", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-03-12T17:44:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=120457602310315&w=2", "source": "cve@mitre.org"}, {"url": "http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/29207", "source": "cve@mitre.org"}, {"url": "http://www.emediawire.com/releases/2008/2/prweb731563.htm", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28078", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40979", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname."}, {"lang": "es", "value": "Vulerabilidad de salto de directorio en el servidor de TFTP en PacketTrap Networks pt360 Tool Suite 1.1.33.1.0 y otras versiones anteriores a 2.0.3900.0, permite a atacantes remotos leer y sobrescribir archivos de su elecci\u00f3n a trav\u00e9s de secuencias de salto de directorio en el nombre de ruta (pathname)."}], "lastModified": "2017-08-08T01:30:03.510", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:packettrap:pt360_tool_suite:1.1.33.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "01EDDF37-D1F7-47FB-AB77-EE1760AFD7C1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}