Lucene search

MitreCVE-2008-3385

HistoryJul 30, 2008 - 6:41 p.m.

CVE-2008-3385

2008-07-3018:41:00

CWE-22

mitre

web.nvd.nist.gov

cve-2008-3385

directory traversal

vulnerability

php help agent 1.0

php help agent 1.1 full

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.03

Percentile

91.0%

JSON

Directory traversal vulnerability in include/head_chat.inc.php in php Help Agent 1.0 and 1.1 Full allows remote attackers to include and execute arbitrary local files via a … (dot dot) in the content parameter. NOTE: in some environments, this can be leveraged for remote file inclusion by using a UNC share pathname or an ftp, ftps, or ssh2.sftp URL.

Affected configurations

Nvd

Node

linuxwebshopphp_help_agentMatch1.0

linuxwebshopphp_help_agentMatch1.1full

VendorProductVersionCPE
linuxwebshopphp_help_agent1.0cpe:2.3:a:linuxwebshop:php_help_agent:1.0:*:*:*:*:*:*:*
linuxwebshopphp_help_agent1.1cpe:2.3:a:linuxwebshop:php_help_agent:1.1:*:full:*:*:*:*:*

Vendor	Product	Version	CPE
linuxwebshop	php_help_agent	1.0	cpe:2.3:a:linuxwebshop:php_help_agent:1.0:::::::*
linuxwebshop	php_help_agent	1.1	cpe:2.3:a:linuxwebshop:php_help_agent:1.1::full:::::

References

secunia.com/advisories/31099

securityreason.com/securityalert/4074

www.securityfocus.com/bid/30240

exchange.xforce.ibmcloud.com/vulnerabilities/43833

www.exploit-db.com/exploits/6080

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

High

EPSS

0.03

Percentile

91.0%

JSON

Related for CVE-2008-3385