CVE-2008-1117

EPSS 69.5%

Vexday Risk Score

50Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 69.5%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

14 Mar 2008Published on NVD

10 May 2008Metasploit module available

24 Nov 2010Public PoC

Weaponization speed

984 daysto first PoC

56 daysto Metasploit module

Recommendation: Plan a near-term fix — a public PoC already exists.

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.

Affected products

n/a · n/a

public PoCs found — 3

exploitdbwww.exploit-db.com/exploits/16339unverified cve_referencewww.exploit-db.com/exploits/4455unverified cve_referencewww.exploit-db.com/exploits/5238unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.altervista.org/adv/timbuto-adv.txt http://aluigi.org/poc/timbuto.zip http://secunia.com/advisories/29316 http://securityreason.com/securityalert/3741 https://www.exploit-db.com/exploits/4455 https://www.exploit-db.com/exploits/5238 http://www.coresecurity.com/?action=item&id=2166 http://www.securityfocus.com/archive/1/489360/100/0/threaded http://www.securityfocus.com/archive/1/489382/100/0/threaded http://www.securityfocus.com/archive/1/489414/100/0/threaded http://www.securityfocus.com/bid/28081 http://www.vupen.com/english/advisories/2008/0840