CVE-2008-0396

Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.

Link	Resource
http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/
http://www.oliverkarow.de/research/bitdefender.txt	Exploit
http://www.securityfocus.com/bid/27358	Exploit
http://secunia.com/advisories/28578	Vendor Advisory
http://securityreason.com/securityalert/3568
http://www.vupen.com/english/advisories/2008/0213
https://exchange.xforce.ibmcloud.com/vulnerabilities/39802
http://www.securityfocus.com/archive/1/486701/100/0/threaded

Configuration 1

cpe:2.3:a:bitdefender:update_server:*:*:*:*:*:*:*:*

---

Published : 2008-01-23 12:00

Updated : 2018-10-15 09:59

---

NVD link : CVE-2008-0396

Mitre link : CVE-2008-0396

No products.

CWE-22