CVE-2008-1221: Path Traversal
First published: Mon Mar 10 2008(Updated: )
Absolute path traversal vulnerability in the FTP server in MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console (aka eScan Server) 9.0.742.1 allows remote attackers to read arbitrary files via an absolute pathname in the RETR (get) command.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microworld Technologies Escan Server | =9.0.742.1 | |
| Microworld Technologies Escan Management Console | =9.0.742.1 | |
| MicroWorld eScan Antivirus | =9.0.742.98 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2008-1221?
CVE-2008-1221 is classified as a medium severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2008-1221?
To fix CVE-2008-1221, it is recommended to update to a patched version of the MicroWorld eScan software or apply relevant security configurations.
What type of vulnerability is CVE-2008-1221?
CVE-2008-1221 is an absolute path traversal vulnerability that allows remote attackers to read arbitrary files.
Which versions of software are affected by CVE-2008-1221?
CVE-2008-1221 affects MicroWorld eScan Corporate Edition 9.0.742.98 and eScan Management Console 9.0.742.1.
Can CVE-2008-1221 be exploited remotely?
Yes, CVE-2008-1221 can be exploited remotely through the FTP server's RETR command.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/microworld technologies
- canonical/microworld technologies escan server
- version/microworld technologies escan server/9.0.742.1
- canonical/microworld technologies escan management console
- version/microworld technologies escan management console/9.0.742.1
- canonical/microworld escan antivirus
- version/microworld escan antivirus/9.0.742.98