Lucene search

K
cve[email protected]CVE-2008-5645
HistoryDec 17, 2008 - 6:30 p.m.

CVE-2008-5645

2008-12-1718:30:01
CWE-22
web.nvd.nist.gov
21
cve-2008-5645
directory traversal
orb networks orb
media server
vulnerability
security
nvd

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.6%

Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.

Affected configurations

NVD
Node
orb_networksorbRange2.01.0017
OR
orb_networksorbMatch2.00.0930
OR
orb_networksorbMatch2.00.0989
OR
orb_networksorbMatch2.0.1014
OR
orb_networksorbMatch2.00.1014
OR
orb_networksorbMatch2.00.1084
OR
orb_networksorbMatch2.01.0008
OR
orb_networksorbMatch2.01.0013
OR
orb_networksorbMatch2.01.0015

7.8 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.6%

Related for CVE-2008-5645