CVE-2008-1410

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 5.6%

exploitation probability

5.6%top 8% of all CVEs

observed exploitation

nono source reports it

1 public exploit(s)

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.

Affected products

n/a · n/a

public PoCs found — 1✓ VexDay Proof

cve_reference✓ VexDay Proofwww.exploit-db.com/exploits/5228

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://aluigi.altervista.org/adv/acropxe-adv.txt http://secunia.com/advisories/29305 http://securityreason.com/securityalert/3758 https://exchange.xforce.ibmcloud.com/vulnerabilities/41074 https://www.exploit-db.com/exploits/5228 http://www.securityfocus.com/archive/1/489358/100/0/threaded http://www.securityfocus.com/bid/28182 http://www.vupen.com/english/advisories/2008/0814/references