CVE Vulnerability

CVE-2008-5645

Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.

7.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 6.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact NONE

Availability Impact NONE

Scope

References
Link Resource
http://secunia.com/advisories/32592
http://marc.info/?l=full-disclosure&m=122606860208526&w=2 Exploit
http://www.securityfocus.com/bid/32187 Patch
http://securityreason.com/securityalert/4773
http://www.vupen.com/english/advisories/2008/3082
https://exchange.xforce.ibmcloud.com/vulnerabilities/46461
Configurations

Configuration 1

cpe:2.3:a:orb_networks:orb:*:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.01.0008:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.01.0015:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.00.0930:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.01.0013:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.0.1014:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.00.0989:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.00.1014:*:*:*:*:*:*:*
cpe:2.3:a:orb_networks:orb:2.00.1084:*:*:*:*:*:*:*
Information

Published : 2008-12-17 06:30

Updated : 2017-08-08 01:33

NVD link : CVE-2008-5645

Mitre link : CVE-2008-5645

Products Affected
No products.
CWE
CWE-22