Lucene search

[email protected]NVD:CVE-2008-3333

HistoryJul 27, 2008 - 11:41 p.m.

CVE-2008-3333

2008-07-2723:41:00

CWE-22

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

JSON

Directory traversal vulnerability in core/lang_api.php in Mantis before 1.1.2 allows remote attackers to include and execute arbitrary files via the language parameter to the user preferences page (account_prefs_update.php).

Affected configurations

NVD

Node

mantismantisRange≤1.1.1

mantismantisMatch0.9

mantismantisMatch0.9.0

mantismantisMatch0.9.1

mantismantisMatch0.10

mantismantisMatch0.10.0

mantismantisMatch0.10.1

mantismantisMatch0.10.2

mantismantisMatch0.11

mantismantisMatch0.11.0

mantismantisMatch0.11.1

mantismantisMatch0.12

mantismantisMatch0.12.0

mantismantisMatch0.13

mantismantisMatch0.13.0

mantismantisMatch0.13.1

mantismantisMatch0.14

mantismantisMatch0.14.0

mantismantisMatch0.14.1

mantismantisMatch0.14.2

mantismantisMatch0.14.3

mantismantisMatch0.14.4

mantismantisMatch0.14.5

mantismantisMatch0.14.6

mantismantisMatch0.14.7

mantismantisMatch0.14.8

mantismantisMatch0.15

mantismantisMatch0.15.0

mantismantisMatch0.15.1

mantismantisMatch0.15.2

mantismantisMatch0.15.3

mantismantisMatch0.15.4

mantismantisMatch0.15.5

mantismantisMatch0.15.6

mantismantisMatch0.15.7

mantismantisMatch0.15.8

mantismantisMatch0.15.9

mantismantisMatch0.15.10

mantismantisMatch0.15.11

mantismantisMatch0.15.12

mantismantisMatch0.16

mantismantisMatch0.16.0

mantismantisMatch0.16.1

mantismantisMatch0.17

mantismantisMatch0.17.0

mantismantisMatch0.17.1

mantismantisMatch0.17.2

mantismantisMatch0.17.3

mantismantisMatch0.17.4

mantismantisMatch0.17.4a

mantismantisMatch0.17.5

mantismantisMatch0.18

mantismantisMatch0.18.0

mantismantisMatch0.18.0_rc1

mantismantisMatch0.18.0a1

mantismantisMatch0.18.0a2

mantismantisMatch0.18.0a3

mantismantisMatch0.18.0a4

mantismantisMatch0.18.1

mantismantisMatch0.18.2

mantismantisMatch0.18.3

mantismantisMatch0.18a1

mantismantisMatch0.19

mantismantisMatch0.19.0

mantismantisMatch0.19.0_rc1

mantismantisMatch0.19.0a

mantismantisMatch0.19.0a1

mantismantisMatch0.19.0a2

mantismantisMatch0.19.1

mantismantisMatch0.19.2

mantismantisMatch0.19.3

mantismantisMatch0.19.4

mantismantisMatch1.0

mantismantisMatch1.0.0

mantismantisMatch1.0.0_rc1

mantismantisMatch1.0.0_rc2

mantismantisMatch1.0.0_rc3

mantismantisMatch1.0.0_rc4

mantismantisMatch1.0.0_rc5

mantismantisMatch1.0.0a1

mantismantisMatch1.0.0a2

mantismantisMatch1.0.0a3

mantismantisMatch1.0.0rc1

mantismantisMatch1.0.0rc2

mantismantisMatch1.0.0rc3

mantismantisMatch1.0.0rc4

mantismantisMatch1.0.1

mantismantisMatch1.0.2

mantismantisMatch1.0.3

mantismantisMatch1.0.4

mantismantisMatch1.0.5

mantismantisMatch1.0.6

mantismantisMatch1.1

mantismantisMatch1.1.0

mantismantisMatch1.1.0a1

References

secunia.com/advisories/30270

secunia.com/advisories/31972

www.gentoo.org/security/en/glsa/glsa-200809-10.xml

www.mantisbt.org/bugs/changelog_page.php

www.mantisbt.org/bugs/view.php?id=9154

www.securityfocus.com/bid/29297

www.securityfocus.com/bid/30354

bugzilla.redhat.com/show_bug.cgi?id=456044

exchange.xforce.ibmcloud.com/vulnerabilities/43984

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.4%

JSON

Related for NVD:CVE-2008-3333

ubuntucve1 dsquare1 cve1 prion1 cvelist1 openvas4 freebsd1 nessus2 gentoo1 securityvulns1