CVE-2008-1117 Path traversal in n/a
Remote attackers can upload files to arbitrary locations via path traversal in Timbuktu Pro, potentially achieving code execution by writing to startup folders.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2008-1117?
CVE-2008-1117 is a critical path traversal vulnerability in n/a, published on 14 Mar 2008. It can be exploited over the network, with no action from the victim.
Official description
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.
Weakness: CWE-22
Which versions are affected by CVE-2008-1117?
It affects 1 product.
Products include Netopia Timbuktu Pro.
How do I fix CVE-2008-1117?
No fix has been published for CVE-2008-1117 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2008-1117 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2008-1117 exists.
Public exploit code: 1 Metasploit module and 3 Exploit-DB entries.
Other vulnerabilities in n/a
Sources
Also known as GHSA-53fw-gq2m-wgwv.