VulnerabilityModified
CVE-2008-5645
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
HIGH 7.8EPSS 2.18%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.18%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:C/I:N/A:N
- EPSS
- 2.18% probability · 81th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-22
- Affected
- orb networks/orb
- Source
- cve@mitre.org
References
- http://marc.info/?l=full-disclosure&m=122606860208526&w=2Exploit
- http://secunia.com/advisories/32592
- http://securityreason.com/securityalert/4773
- http://www.securityfocus.com/bid/32187Patch
- http://www.vupen.com/english/advisories/2008/3082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46461
- http://marc.info/?l=full-disclosure&m=122606860208526&w=2Exploit
- http://secunia.com/advisories/32592
- http://securityreason.com/securityalert/4773
- http://www.securityfocus.com/bid/32187Patch
- http://www.vupen.com/english/advisories/2008/3082
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46461
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.