CVEvulnerability
CVE-2008-1643
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-04-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors.
Affected configurations
• landesk software landesk management suite (<= 8.7)
• landesk software landesk management suite 8.8
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://community.landesk.com/support/docs/DOC-2659 community.landesk.com
- http://secunia.com/advisories/29324 Vendor Advisory
- http://www.securityfocus.com/bid/28535 www.securityfocus.com
- http://www.securitytracker.com/id?1019748 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1051/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41562 exchange.xforce.ibmcloud.com
- http://community.landesk.com/support/docs/DOC-2659 community.landesk.com
- http://secunia.com/advisories/29324 Vendor Advisory
- http://www.securityfocus.com/bid/28535 www.securityfocus.com
- http://www.securitytracker.com/id?1019748 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/1051/references www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41562 exchange.xforce.ibmcloud.com