CVE-2008-1118

CVE-2008-1118 affects Timbuktu Pro 8.6.5 for Windows (and possibly 8.7 for Mac OS X). The root cause is a lack of input validation when logging information fields sourced from remote packets (computer name, user name, IP address). This allows a remote attacker to craft log entries or manipulate l...

CVE-2000-0086

The CVE-2000-0086 entry concerns Netopia Timbuktu Pro, where credentials (user IDs and passwords) are transmitted in cleartext, enabling eavesdroppers to obtain them via network sniffing. The available documents confirm the affected software and the root cause (unencrypted credential handling), w...

CVE-2002-0135

Netopia Timbuktu Pro 6.0.1 and earlier are affected by a denial of service vulnerability discovered via a series of connections to ports 1417–1420. The issue allows remote attackers to crash the service, impacting availability (Partial impact per CVSS). The provided documents identify the affecte...

CVE-2008-1117

CVE-2008-1117 describes a directory traversal/file upload vulnerability in Timbuktu Pro 8.6.5 for Windows (tb2ftp.dll) with possible impact on Mac OS X 8.7. An attacker can upload a file to an arbitrary location by crafting a destination filename that uses a backslash followed by "../" sequences,...

CVE-2000-0142

Summary: Timbuktu Pro 2.0b650 contains a vulnerability in its authentication protocol that lets remote attackers cause a denial of service by connecting to ports 407 and 1417. What’s affected: Timbuktu Pro, version 2.0b650; vulnerability relates to the authentication mechanism and affects availab...

CVE-2008-1337

CVE-2008-1337 affects Timbuktu Pro 8.6.5 RC 229 for Windows, where the instant message service is vulnerable to remote DoS. An attacker can trigger a daemon crash by sending an invalid Version field, or cause CPU exhaustion and daemon termination via an invalid or partial message. The issue is do...