PT-2008-5041 · Softpress · Freeway

Publicado 2008-08-14 · Atualizado 2017-08-08 · CVE-2008-3677

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Freeway versions prior to 1.4.2.197

Description A directory traversal issue exists, allowing remote attackers to include and execute arbitrary local files.

Recommendations For versions prior to 1.4.2.197, update to version 1.4.2.197 or later to resolve the issue.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-3677

Produtos afetados

Freeway

Referências · 6

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3677 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3677 · Nota de Segurança
• http://securityfocus.com/bid/30676 · Nota
• http://secunia.com/advisories/31475 · Aviso do Fabricante
• http://sourceforge.net/project/shownotes.php?release_id=619467 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44426 · Nota