Unscored severity · published Jun 2, 2008
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via…
–
CVSS
2.8%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Backupexec System Recovery · Symantec
7.0; 7.0.1; 7.0.2; 7.0.3; 8.0; 8.0.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-2512
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-2512
Patch
http://secunia.com/advisories/30432
Patch
http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html
www.securityfocus.com
http://www.securityfocus.com/bid/29350
www.securitytracker.com
http://www.securitytracker.com/id?1020128
www.vupen.com
http://www.vupen.com/english/advisories/2008/1686/references
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/42714
More from Backupexec System Recovery
–
CVE-2012-0305
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan…
–
CVE-2008-0457
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0…
–
CVE-2007-4347
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to…
–
CVE-2007-4346
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service…
–
CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows…