CVE-2008-0790

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• WinIPDS 3.3 rev. G52-33-021 - Directory Traversal / Denial of Service2008-02-12 · remote · windows · Verified

Impact

Directory traversal vulnerability in ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://aluigi.altervista.org/adv/winipds-adv.txt
• http://secunia.com/advisories/28934
• http://securityreason.com/securityalert/3658
• http://www.securityfocus.com/archive/1/488015/100/0/threaded
• http://www.securityfocus.com/archive/1/489499/100/0/threaded
• http://www.securityfocus.com/bid/27757
• http://aluigi.altervista.org/adv/winipds-adv.txt
• http://secunia.com/advisories/28934
• http://securityreason.com/securityalert/3658
• http://www.securityfocus.com/archive/1/488015/100/0/threaded
• http://www.securityfocus.com/archive/1/489499/100/0/threaded
• http://www.securityfocus.com/bid/27757