CVEvulnerability
CVE-2008-1118
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-20
Description
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.
Affected configurations
• netopia timbuktu pro 8.6.5
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/29316 Vendor Advisory
- http://securityreason.com/securityalert/3742 securityreason.com
- http://www.coresecurity.com/?action=item&id=2166 www.coresecurity.com
- http://www.securityfocus.com/archive/1/489414/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28081 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41330 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5238 www.exploit-db.com
- http://secunia.com/advisories/29316 Vendor Advisory
- http://securityreason.com/securityalert/3742 securityreason.com
- http://www.coresecurity.com/?action=item&id=2166 www.coresecurity.com
- http://www.securityfocus.com/archive/1/489414/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28081 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41330 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/5238 www.exploit-db.com