NVD

Id
2419  
Name
CVE-2008-2511  
Description
Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the argument to the SaveToFile method. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: some of these details are obtained from third party information.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-02  
Modified Date
2011-03-07  
Seq
2008-2511  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
15385 2419 CVE-2008-2511 http://retrogod.altervista.org/9sg_CA_poc.html  View
15386 2419 CVE-2008-2511 5682  View
15387 2419 CVE-2008-2511 20080528 [NSG_28-5-08] CA Internet Security Suite 2008 (UmxEventCli.dll/SaveToFile()) remote file corruption poc  View
15388 2419 CVE-2008-2511 1020129  View
15389 2419 CVE-2008-2511 ADV-2008-1696  View
15390 2419 CVE-2008-2511 internet-security-umxeventcli-file-overwrite(42712)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47186 JVNDB-2008-002496 CA Internet Security Suite の UmxEventCli.dll におけるディレクトリトラバーサルの脆弱性 CA Internet Security Suite の UmxEventCli.dll 内にある UmxEventCli.CachedAuditDataList.1 (UmxEventCliLib) ActiveX コントロールには、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-2511 32624 CVE-2008-2511 2419 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002496.html 2008-06-02 2010-12-24 View