CVE-2008-1117

概要

参考情報

• aluigi.altervista.org/adv/timbuto-adv.txt
• aluigi.org/poc/timbuto.zip · Exploit
• secunia.com/advisories/29316 · Vendor Advisory
• securityreason.com/securityalert/3741
• coresecurity.com
• securityfocus.com/archive/1/489360/100/0/threaded
• securityfocus.com/archive/1/489382/100/0/threaded
• securityfocus.com/archive/1/489414/100/0/threaded
• securityfocus.com/bid/28081
• vupen.com/english/advisories/2008/0840
• exploit-db.com/exploits/4455
• exploit-db.com/exploits/5238

timbuktu pro のその他の脆弱性

• CVE-2008-1337中 5.0The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (d…
• CVE-2008-1118高 7.5Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken fro…
• CVE-2002-0135中 5.0Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of th…
• CVE-2000-0142中 5.0The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 141…
• CVE-2000-0086中 5.0Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote attackers to obtain them via sniffing.