CVE-2008-0396 - CVE House
Back to Database
Status published High CVE-2008-0396

Directory traversal vulnerability in BitDefender Update Server (http.exe), as used...

Vulnerability Description

Directory traversal vulnerability in BitDefender Update Server (http.exe), as used in BitDefender products including Security for Fileservers and Enterprise Manager (BDEM), allows remote attackers to read arbitrary files via .. (dot dot) sequences in an HTTP request.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-0396

Credits & Attribution

No credits recorded in the NVD database.

References

More from bitdefender

View All →
CVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions...
High 7.8
CVE-2019-14242
An issue was discovered in Bitdefender products for Windows (Bitdefender...
Medium 6.7
CVE-2019-12612
An issue was discovered in Bitdefender BOX firmware versions before...
High 7.8
CVE-2019-12611
An issue was discovered in Bitdefender BOX firmware versions before...
Medium 4.4
CVE-2018-8955
The installer for BitDefender GravityZone relies on an encoded string...
Critical 9.8

Affected Vendor

bitdefender

View all reports →

Affected Software

update server
Vulnerable Versions:
Unknown

Timeline

Official Publish: January 23rd, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.