CVE-2008-5728

MEDIUM 5.1CVE-2008-5728 · Published 26/12/2008 · updated 16/06/2026

In short

CVE-2008-5728 is a MEDIUM (CVSS 5.1) vulnerability affecting netcat (netcat).
Chance of exploitation in the next 30 days (EPSS): 2.0%, higher than 80.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
netcat netcat	`= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 3.0≤ 3.12`	No fix yet

Description

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/.

References

More vulnerabilities in netcat

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

netcat

= 1.1= 2.0= 2.1= 2.2= 2.3= 2.4= 3.0≤ 3.12

No fix yet

Description

More vulnerabilities in netcat

See all →