PT-2008-3196 · Landesk · Landesk Management Suite

Published 2008-04-02 · Updated 2017-08-08 · CVE-2008-1643

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions LANDesk Management Suite versions 8.7 SP5 and earlier, 8.8

Description A directory traversal issue exists in the PXE TFTP Service of LANDesk Management Suite, allowing remote attackers to read arbitrary files.

Recommendations For versions 8.7 SP5 and earlier, and 8.8, update to a version later than 8.8 to resolve the issue.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-1643

Affected Products

Landesk Management Suite

References · 7

• http://secunia.com/advisories/29324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1643 · Security Note
• http://securitytracker.com/id?1019748 · Note
• http://securityfocus.com/bid/28535 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41562 · Note
• http://community.landesk.com/support/docs/DOC-2659 · Note
• http://vupen.com/english/advisories/2008/1051/references · Note