CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.

Link	Resource
http://www.coresecurity.com/?action=item&id=2166
http://www.securityfocus.com/bid/28081	Exploit
http://secunia.com/advisories/29316	Vendor Advisory
http://securityreason.com/securityalert/3742
https://exchange.xforce.ibmcloud.com/vulnerabilities/41330
https://www.exploit-db.com/exploits/5238
http://www.securityfocus.com/archive/1/489414/100/0/threaded

Configuration 1

cpe:2.3:a:netopia:timbuktu_pro:8.6.5:*:windows:*:*:*:*:*

---

Published : 2008-03-14 08:44

Updated : 2018-10-11 08:29

---

NVD link : CVE-2008-1118

Mitre link : CVE-2008-1118

No products.

CWE-20