CVE-2007-4220 Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related t...
HighCVSS 7.8
EPSS 4.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| motorola timbuktu | = 8.6.3.1367 | No fix listed |
References
- 20070827 Motorola Timbuktu Pro Directory Traversal Vulnerability patch third-party-advisory vendor-advisory
- 26588 third-party-advisory vendor-advisory
- 25453 patch vdb-entry
- 1018614 vdb-entry
- ADV-2007-2990 vdb-entry
- timbuktu-send-directory-traversal(36273) vdb-entry