PT-2007-5413 · Motorola · Timbuktu Pro

Published 2007-08-29 · Updated 2017-07-29 · CVE-2007-4220

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions Motorola Timbuktu Pro versions prior to 8.6.5

Description The issue allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a "Send" request, probably related to the Send and Exchange services.

Recommendations For versions prior to 8.6.5, update to version 8.6.5 or later to resolve the issue.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2007-4220

Affected Products

Timbuktu Pro

References · 9

• 🔥 https://exploit-db.com/exploits/30532 · Exploit
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=589 · Vendor Advisory
• http://securityfocus.com/bid/25453 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-4220 · Security Note
• http://secunia.com/advisories/26588 · Vendor Advisory
• ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36273 · Note
• http://securitytracker.com/id?1018614 · Note
• http://vupen.com/english/advisories/2007/2990 · Note