CVE-2008-2717
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 3.0%
TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.
Productos afectados
n/a · n/aReferencias
http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/http://secunia.com/advisories/30619http://secunia.com/advisories/30660http://securityreason.com/securityalert/3945https://exchange.xforce.ibmcloud.com/vulnerabilities/42988http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/http://www.debian.org/security/2008/dsa-1596http://www.securityfocus.com/archive/1/493270/100/0/threadedhttp://www.securityfocus.com/bid/29657http://www.vupen.com/english/advisories/2008/1802