Lucene search

[email protected]CVE-2008-6195

HistoryFeb 20, 2009 - 12:30 a.m.

CVE-2008-6195

2009-02-2000:30:00

CWE-22

[email protected]

web.nvd.nist.gov

cve-2008-6195

directory traversal

pxe

tftp service

ldms

landesk management suite

vulnerability

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.013 Low

EPSS

Percentile

86.0%

JSON

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by “…” sequences, a different vulnerability than CVE-2008-1643.

Affected configurations

NVD

Node

landesklandesk_management_suiteRange≤8.80.1.1

landesklandesk_management_suiteMatch8.7

landesklandesk_management_suiteMatch8.7sp5

CPENameOperatorVersion
landesk:landesk_management_suitelandesk landesk management suitele8.80.1.1
landesk:landesk_management_suitelandesk landesk management suiteeq8.7

CPE	Name	Operator	Version
landesk:landesk_management_suite	landesk landesk management suite	le	8.80.1.1
landesk:landesk_management_suite	landesk landesk management suite	eq	8.7

References

community.landesk.com/support/docs/DOC-2659

www.securityfocus.com/archive/1/490390/100/0/threaded

www.securityfocus.com/bid/28577

exchange.xforce.ibmcloud.com/vulnerabilities/48852

6.8 Medium

AI Score

Confidence

Low

7.8 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

0.013 Low

EPSS

Percentile

86.0%

JSON

Related for CVE-2008-6195

prion2 nvd2 cvelist2 cve1