Unscored severity · published Mar 20, 2008
CVE-2008-1410
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory…
–
CVSS
5.6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.6% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SD
Snap Deploy · Acronis
2.0.0.1076 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-1410
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-1410
Exploit
http://aluigi.altervista.org/adv/acropxe-adv.txt
Vendor Advisory
http://secunia.com/advisories/29305
securityreason.com
http://securityreason.com/securityalert/3758
www.securityfocus.com
http://www.securityfocus.com/archive/1/489358/100/0/threaded
Exploit
http://www.securityfocus.com/bid/28182
www.vupen.com
http://www.vupen.com/english/advisories/2008/0814/references
More from Snap Deploy
7.8
CVE-2023-2355
Local privilege escalation due to a DLL hijacking vulnerability
7.8
CVE-2022-30697
Local privilege escalation due to insecure folder permissions
7.8
CVE-2022-30696
Local privilege escalation due to a DLL hijacking vulnerability
7.8
CVE-2022-30695
Local privilege escalation due to excessive permissions assigned to child processes
7.3
CVE-2024-34019
Local privilege escalation due to DLL hijacking vulnerability