PT-2008-4774 · Talkback · Talkback

Sirgod · Publicado 2008-07-30 · Atualizado 2017-09-29 · CVE-2008-3371

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TalkBack versions prior to 2.3.6.2

Description A directory traversal issue in the install/help.php file allows remote attackers to include and execute arbitrary local files by using directory traversal sequences in the language parameter.

Recommendations For versions prior to 2.3.6.2, update to version 2.3.6.2 or later to resolve the issue.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-3371

Produtos afetados

Talkback

Referências · 10

• 🔥 https://exploit-db.com/exploits/6148 · Exploit
• 🔥 https://exploit-db.com/exploits/9095 · Exploit
• 🔥 http://securityfocus.com/bid/30393 · Exploit
• 🔥 https://exploit-db.com/exploits/6451 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44018 · Nota
• http://securityreason.com/securityalert/4067 · Nota
• http://packetstormsecurity.org/0907-exploits/talkback-lfiexec.txt · Nota
• http://scripts.oldguy.us/talkback/release-notes.html · Nota
• http://vupen.com/english/advisories/2008/2211/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3371 · Nota de Segurança