CVE-2008-0396 Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to....
HighCVSS 7.8
EPSS 8.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Bitdefender update server | All versions | No fix listed |
References
- oliver.greyhat.de
- 28578 third-party-advisory vendor-advisory
- 3568 third-party-advisory
- www.oliverkarow.de exploit
- 20080119 BitDefender Update Server - Unauthorized Remote File Access Vulnerability mailing-list
- 27358 exploit vdb-entry
- ADV-2008-0213 vdb-entry
- bitdefender-http-server-directory-traversal(39802) vdb-entry