CyberSec.Space Logo
Back to CVE Browser

CVE-2009-1394

CRITICAL
9.3
CVSS Severity Score
EPSS Score0.0570%
EPSS Percentile1.34th
PublishedJun 26, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending a long malformed string over the PlughNTCommand named pipe.

Affected Platforms (CPE)

📦
Motorola

Timbuktu Pro

= 8.6.5

References & Advisories

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809
🔗 http://secunia.com/advisories/35533
🔗 http://www.netopia.com/software/products/tb2/
🔗 http://www.securityfocus.com/archive/1/504554/100/0/threaded
🔗 http://www.securityfocus.com/bid/35496
🔗 http://www.securitytracker.com/id?1022455
🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=809
🔗 http://secunia.com/advisories/35533

Related Vulnerabilities

CVE-2007-422110.0

Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (d...

CVE-2008-111710.0

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 f...

CVE-2007-42207.8

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete ar...

CVE-2008-11187.5

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields...