CVE-2007-4220

Motorola Timbuktu Pro 8.6.3.1367 - Directory Traversal

Severity Score

7.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services.

Vulnerabilidad de salto de directorio en Motorola Timbuktu Pro anterior a 8.6.5 para Windows permite a atacantes remotos crear o borrar archivos de su elección mediante un .. (punto punto) en una petición Send (Enviar), probablemente relacionada con los servicios (1) Send (Envío) y (2) Exchange (Intercambio).

*Credits: N/A

CVSS Scores

NISTv2 7.8

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

None

Integrity

Complete

Availability

None

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2007-08-08 CVE Reserved
2007-08-27 CVE Published
2007-08-27 First Exploit
2024-08-07 CVE Updated
2024-08-09 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

CAPEC

References (8)

URL	Tag	Source
ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf	X_refsource_confirm
http://www.securitytracker.com/id?1018614	Vdb Entry
http://www.vupen.com/english/advisories/2007/2990	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/36273	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/30532	2007-08-27

URL	Date	SRC
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=589	2017-07-29
http://www.securityfocus.com/bid/25453	2017-07-29

URL	Date	SRC
http://secunia.com/advisories/26588	2017-07-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Motorola Search vendor "Motorola"		Timbuktu Search vendor "Motorola" for product "Timbuktu"				8.6.3.1367 Search vendor "Motorola" for product "Timbuktu" and version "8.6.3.1367"		pro		Affected