Login Request a demo
Unscored severity · published Jan 23, 2008
CVE-2008-0396
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows…
–
CVSS
8.5%
EPSS
No
On KEV
Description
Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.5% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
US
Update Server · Bitdefender
All versions, or not specified · source: NVD
Affected product
US
Update Server
Bitdefender
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0396
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0396
oliver.greyhat.de
http://oliver.greyhat.de/2008/01/19/bitdefender-unauthorized-remote-file-access-vulnerability/
Vendor Advisory
http://secunia.com/advisories/28578
securityreason.com
http://securityreason.com/securityalert/3568
Exploit
http://www.oliverkarow.de/research/bitdefender.txt
www.securityfocus.com
http://www.securityfocus.com/archive/1/486701/100/0/threaded
Exploit
http://www.securityfocus.com/bid/27358
More from Update Server
9.1
CVE-2020-15297
Insufficient validation in the Bitdefender Update Server and BEST Relay components of Bitdefender Endpoint Security Tools versions prior to 6.6.20.294 allows an unprivileged…
7.5
CVE-2022-0677
Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update…