CVEvulnerability
CVE-2008-0396
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-01-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
Affected configurations
• bitdefender update server
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/ oliver.greyhat.de
- http://secunia.com/advisories/28578 Vendor Advisory
- http://securityreason.com/securityalert/3568 securityreason.com
- http://www.oliverkarow.de/research/bitdefender.txt Exploit
- http://www.securityfocus.com/archive/1/486701/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27358 Exploit
- http://www.vupen.com/english/advisories/2008/0213 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39802 exchange.xforce.ibmcloud.com
- http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/ oliver.greyhat.de
- http://secunia.com/advisories/28578 Vendor Advisory
- http://securityreason.com/securityalert/3568 securityreason.com
- http://www.oliverkarow.de/research/bitdefender.txt Exploit
- http://www.securityfocus.com/archive/1/486701/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/27358 Exploit
- http://www.vupen.com/english/advisories/2008/0213 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39802 exchange.xforce.ibmcloud.com