CVE-2008-1117

CRITICAL 10.0CVE-2008-1117 · Published 14/03/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
timbuktu pro netopia	`= 8.6.5`	No fix yet

Description

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.

References

aluigi.altervista.org/adv/timbuto-adv.txt
aluigi.org/poc/timbuto.zip · Exploit
secunia.com/advisories/29316 · Vendor Advisory
securityreason.com/securityalert/3741
coresecurity.com
securityfocus.com/archive/1/489360/100/0/threaded
securityfocus.com/archive/1/489382/100/0/threaded
securityfocus.com/archive/1/489414/100/0/threaded
securityfocus.com/bid/28081
vupen.com/english/advisories/2008/0840
exploit-db.com/exploits/4455
exploit-db.com/exploits/5238

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free