Timbuktu Pro

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:netopia:timbuktu_pro:8.6.5:*:windows:*:*:*:*:*

part: a version: 8.6.5 update: *

VendorNetopia (eaa28f09-3fd1-5e4f-b303-e3dff56ee43d)
ProductTimbuktu Pro (95ef0b97-524c-510e-a170-9259d8213753)
Editionwindows
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-1118 vulnerable 2026-06-08 04:50:18.925958 Details available
Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.
Published: 2008-03-14T20:00:00.000Z
Updated: 2024-08-07T08:08:57.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1117 vulnerable 2026-06-08 04:50:18.925527 Details available
Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbitrary locations via a destination filename with a \ (backslash) character followed by ../ (dot dot slash) sequences. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2007-4220.
Published: 2008-03-14T20:00:00.000Z
Updated: 2024-08-07T08:08:57.659Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.