exploitDog

CVE-2008-6195

Опубликовано: 20 фев. 2009

Источник: nvd

CVSS2: 7.8

EPSS Низкий

Описание

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:landesk:landesk_management_suite:*:*:*:*:*:*:*:*

Версия до 8.80.1.1 (включая)

cpe:2.3:a:landesk:landesk_management_suite:8.7:*:*:*:*:*:*:*

cpe:2.3:a:landesk:landesk_management_suite:8.7:sp5:*:*:*:*:*:*

EPSS

Процентиль: 81%

0.01597

Низкий

7.8 High

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-c8cm-3pj7-pfp7

github

больше 3 лет назад

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.

EPSS

Процентиль: 81%

0.01597

Низкий

7.8 High

CVSS2

Дефекты

CWE-22