« Volver al listado

CVE-2008-1310

Estado: ModificadaAlta (10)—

Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Packettrap — Pt360 Tool Suite

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2008-1310",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 10,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-03-12T17:44:00.000",
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=120457602310315&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/29207",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.emediawire.com/releases/2008/2/prweb731563.htm",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/28078",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40979",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=120457602310315&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://packetstorm.linuxsecurity.com/0803-advisories/DDIVRT-2008-10.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/29207",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.emediawire.com/releases/2008/2/prweb731563.htm",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/28078",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/40979",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-22"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Directory traversal vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0, and other versions before 2.0.3900.0, allows remote attackers to read and overwrite arbitrary files via directory traversal sequences in the pathname."
    },
    {
      "lang": "es",
      "value": "Vulerabilidad de salto de directorio en el servidor de TFTP en PacketTrap Networks pt360 Tool Suite 1.1.33.1.0 y otras versiones anteriores a 2.0.3900.0, permite a atacantes remotos leer y sobrescribir archivos de su elección a través de secuencias de salto de directorio en el nombre de ruta (pathname)."
    }
  ],
  "lastModified": "2026-06-16T22:51:28.417",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:packettrap:pt360_tool_suite:1.1.33.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "01EDDF37-D1F7-47FB-AB77-EE1760AFD7C1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}