Back to CVE Browser

CVE-2007-4221

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.0360%

EPSS Percentile32.64th

PublishedAug 29, 2007

Last ModifiedApr 23, 2026

Vulnerability Description

Multiple buffer overflows in Motorola Timbuktu Pro before 8.6.5 for Windows allow remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via (1) a long user name and (2) certain malformed requests; and (3) allow remote Timbuktu servers to have an unknown impact via a malformed HELLO response, related to the Scanner component and possibly related to a malformed computer name.

Affected Platforms (CPE)

📦

Motorola

Timbuktu

= 8.6.3.1367

References & Advisories

🔗 ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf

🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=590

🔗 http://secunia.com/advisories/26588

🔗 http://www.securityfocus.com/bid/25454

🔗 http://www.securitytracker.com/id?1018614

🔗 http://www.vupen.com/english/advisories/2007/2990

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/36280

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/36281

Related Vulnerabilities

CVE-2008-111710.0

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 f...

CVE-2009-13949.3

Stack-based buffer overflow in Motorola Timbuktu Pro 8.6.5 on Windows allows remote attackers to execute arbitrary code by sending...

CVE-2007-42207.8

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete ar...

CVE-2008-11187.5

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields...