high7.8Public exploit code
CVE-2008-6195
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to rea…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LANDesk Management Suite 8.80.1.1 - PXE TFTP Service Directory Traversal2008-04-02 · remote · linux · Verified
Impact
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Landesk | Landesk Management Suite | through 8.80.1.1 Version 8.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://community.landesk.com/support/docs/DOC-2659
- http://www.securityfocus.com/archive/1/490390/100/0/threaded
- http://www.securityfocus.com/bid/28577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48852
- http://community.landesk.com/support/docs/DOC-2659
- http://www.securityfocus.com/archive/1/490390/100/0/threaded
- http://www.securityfocus.com/bid/28577
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48852