CVE-2008-2512

Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2008-06-02

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Backupexec System Recovery (Symantec)

References

• http://secunia.com/advisories/30432
• http://securityresponse.symantec.com/avcenter/security/Content/2008.05.28c.html
• http://www.securityfocus.com/bid/29350
• http://www.securitytracker.com/id?1020128
• http://www.vupen.com/english/advisories/2008/1686/references
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42714