CVE

Id
31235  
CVE No.
CVE-2008-1118  
Status
Candidate  
Description
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.  
Phase
Assigned (20080303)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
333433 31235 CVE-2008-1118 BUGTRAQ:20080311 CORE-2008-0204: Timbuktu Pro Remote Path Traversal and Log Injection  View
333434 31235 CVE-2008-1118 URL:http://www.securityfocus.com/archive/1/archive/1/489414/100/0/threaded  View
333435 31235 CVE-2008-1118 MILW0RM:5238  View
333436 31235 CVE-2008-1118 URL:http://www.milw0rm.com/exploits/5238  View
333437 31235 CVE-2008-1118 MISC:http://www.coresecurity.com/?action=item&id=2166  View
333438 31235 CVE-2008-1118 BID:28081  View
333439 31235 CVE-2008-1118 URL:http://www.securityfocus.com/bid/28081  View
333440 31235 CVE-2008-1118 SECUNIA:29316  View
333441 31235 CVE-2008-1118 URL:http://secunia.com/advisories/29316  View
333442 31235 CVE-2008-1118 SREASON:3742  View
333443 31235 CVE-2008-1118 URL:http://securityreason.com/securityalert/3742  View
333444 31235 CVE-2008-1118 XF:timbuktu-log-security-bypass(41330)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47480 JVNDB-2008-002790 Koobi Pro の downloads モジュールにおける SQL インジェクションの脆弱性 Koobi Pro の downloads モジュールには、SQL インジェクションの脆弱性が存在します。 CVE-2008-1122 31235 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002790.html  View