CVE-2008-3195: Path Traversal
Directory traversal vulnerability in bin/configure in TWiki before 4.2.3, when a certain step in the installation guide is skipped, allows remote attackers to read arbitrary files via a query string containing a .. (dot dot) in the image variable, and execute arbitrary files via unspecified vectors.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3195?
CVE-2008-3195 is considered a medium severity vulnerability due to its potential to allow unauthorized access to sensitive files.
How do I fix CVE-2008-3195?
To fix CVE-2008-3195, upgrade TWiki to version 4.2.3 or later.
What versions of TWiki are affected by CVE-2008-3195?
CVE-2008-3195 affects TWiki versions from 4.0.0 up to 4.2.2.
Can CVE-2008-3195 be exploited remotely?
Yes, CVE-2008-3195 can be exploited remotely by attackers to read arbitrary files.
What kind of attacks can CVE-2008-3195 facilitate?
CVE-2008-3195 can facilitate directory traversal attacks, enabling unauthorized file access and potential remote code execution.