CVE-2008-1118 - CVE House
Back to Database
Status published High CVE-2008-1118

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac...

Vulnerability Description

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted log entries, and possibly avoid detection of attacks, via modified (1) computer name, (2) user name, and (3) IP address fields.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-1118

Credits & Attribution

No credits recorded in the NVD database.

References

More from netopia

View All →
CVE-2008-1337
The instant message service in Timbuktu Pro 8.6.5 RC 229...
Medium 5
CVE-2008-1117
Directory traversal vulnerability in the Notes (aka Flash Notes or...
Critical 10
CVE-2004-0810
Buffer overflow in Netopia Timbuktu 7.0.3 allows remote attackers to...
Medium 5
CVE-2002-0135
Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to...
Medium 5
CVE-2001-0438
Preview version of Timbuktu for Mac OS X allows local...
Low 2.1

Affected Vendor

Affected Software

timbuktu pro
Vulnerable Versions:
8.6.5

Timeline

Official Publish: March 14th, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.