CVE-2008-5645 Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
HighCVSS 7.8
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| orb networks orb | <= 2.01.0017 | No fix listed |
| orb networks orb | = 2.00.0930 | No fix listed |
| orb networks orb | = 2.00.0989 | No fix listed |
| orb networks orb | = 2.0.1014 | No fix listed |
| orb networks orb | = 2.00.1014 | No fix listed |
| orb networks orb | = 2.00.1084 | No fix listed |
| orb networks orb | = 2.01.0008 | No fix listed |
| orb networks orb | = 2.01.0013 | No fix listed |
| orb networks orb | = 2.01.0015 | No fix listed |
References
- 20081106 DDIVRT-2008-17 Orb Directory Traversal exploit mailing-list
- 32592 third-party-advisory
- 4773 third-party-advisory
- 32187 patch vdb-entry
- ADV-2008-3082 vdb-entry
- orb-unspecified-directory-traversal(46461) vdb-entry