CVE-2008-6508

EPSS 83.4%

Vexday Risk Score

60Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 83.4%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Lifecycle

10 Nov 2008Metasploit module available

23 Mar 2009Published on NVD

28 Jun 2012Public PoC

Weaponization speed

1192 daysto first PoC

Recommendation: Plan a near-term fix — a public PoC already exists.

Directory traversal vulnerability in the AuthCheck filter in the Admin Console in Openfire 3.6.0a and earlier allows remote attackers to bypass authentication and access the admin interface via a .. (dot dot) in a URI that matches the Exclude-Strings list, as demonstrated by a /setup/setup-/.. sequence in a URI.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/19432unverified cve_referencewww.exploit-db.com/exploits/7075unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://osvdb.org/49663 http://secunia.com/advisories/32478 https://exchange.xforce.ibmcloud.com/vulnerabilities/46488 https://www.exploit-db.com/exploits/7075 http://www.andreas-kurtz.de/advisories/AKADV2008-001-v1.0.txt http://www.andreas-kurtz.de/archives/63 http://www.igniterealtime.org/builds/openfire/docs/latest/changelog.html http://www.igniterealtime.org/issues/browse/JM-1489 http://www.securityfocus.com/archive/1/498162/100/0/threaded http://www.securityfocus.com/bid/32189 http://www.vupen.com/english/advisories/2008/3061