CVE-2008-1410

Description

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.

References

https://www.exploit-db.com/exploits/5228

https://exchange.xforce.ibmcloud.com/vulnerabilities/41074

https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-1414

http://www.vupen.com/english/advisories/2008/0814/references

http://www.securityfocus.com/bid/28182

http://www.securityfocus.com/archive/1/489358/100/0/threaded

http://securityreason.com/securityalert/3758

http://secunia.com/advisories/29305

http://aluigi.altervista.org/adv/acropxe-adv.txt

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS