CVE-2008-1117 : Directory traversal vulnerability in the Notes (aka Flash Notes or instant messa

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.

Published 2008-03-14 20:44:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Directory traversal

Products affected by CVE-2008-1117

Netopia » Timbuktu Pro » Version: 8.6.5 Windows Edition
cpe:2.3:a:netopia:timbuktu_pro:8.6.5:*:windows:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2008-1117

EPSS FAQ

76.83%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

Metasploit modules for CVE-2008-1117

Timbuktu Pro Directory Traversal/File Upload

Disclosure Date: 2008-05-10

First seen: 2020-04-26

exploit/windows/motorola/timbuktu_fileupload

This module exploits a directory traversal vulnerability in Motorola's Timbuktu Pro for Windows 8.6.5. Authors: - MC <mc@metasploit.com>

More information

CVSS scores for CVE-2008-1117

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete

CWE ids for CVE-2008-1117

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2008-1117

Jump to

Vulnerability Details : CVE-2008-1117