Lucene search

[email protected]CVE-2008-5728

HistoryDec 26, 2008 - 5:30 p.m.

CVE-2008-5728

2008-12-2617:30:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2008-5728

directory traversal

vulnerability

aist netcat

remote execution

arbitrary file inclusion

nvd

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.0%

JSON

Multiple directory traversal vulnerabilities in AIST NetCat 3.12 and earlier, when magic_quotes_gpc is disabled and register_globals is enabled, allow remote attackers to include and execute arbitrary local files via a … (dot dot) in (1) the system parameter in modules/netshop/post.php; and the INCLUDE_FOLDER parameter in (2) auth.inc.php, (3) banner.inc.php, (4) blog.inc.php, and (5) forum.inc.php in modules/.

CPENameOperatorVersion
netcat:netcatnetcateq2.4
netcat:netcatnetcateq2.3
netcat:netcatnetcateq2.1
netcat:netcatnetcateq2.2
netcat:netcatnetcatle3.12
netcat:netcatnetcateq3.0
netcat:netcatnetcateq1.1
netcat:netcatnetcateq2.0

CPE	Name	Operator	Version
netcat:netcat	netcat	eq	2.4
netcat:netcat	netcat	eq	2.3
netcat:netcat	netcat	eq	2.1
netcat:netcat	netcat	eq	2.2
netcat:netcat	netcat	le	3.12
netcat:netcat	netcat	eq	3.0
netcat:netcat	netcat	eq	1.1
netcat:netcat	netcat	eq	2.0

References

securityreason.com/securityalert/4819

www.securityfocus.com/bid/32992

exchange.xforce.ibmcloud.com/vulnerabilities/47576

www.exploit-db.com/exploits/7560

7.5 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.006 Low

EPSS

Percentile

79.0%

JSON

Related for CVE-2008-5728

prion1 securityvulns1