Back to CVE Browser

CVE-2008-1311

MEDIUM

5.0

CVSS Severity Score

EPSS Score0.0680%

EPSS Percentile36.67th

PublishedMar 12, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe), (2) '"' (quotation mark), or (3) "<>" (less than, greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.

Affected Platforms (CPE)

📦

Packettrap

Pt360 Tool Suite Pro

<= 2.0.3901.0

References & Advisories

🔗 http://aluigi.altervista.org/adv/packettrash-adv.txt

🔗 http://aluigi.org/testz/tftpx.zip

🔗 http://secunia.com/advisories/29308

🔗 http://securityreason.com/securityalert/3734

🔗 http://www.securityfocus.com/archive/1/489355/100/0/threaded

🔗 http://www.securityfocus.com/bid/28187

🔗 http://www.vupen.com/english/advisories/2008/0811/references

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/41073

Related Vulnerabilities

CVE-2008-501710.0

Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, ...

CVE-2008-009810.0

Buffer overflow in RealPlayer 11 build 6.0.14.748 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE...

CVE-2008-524410.0

Unspecified vulnerability in xine-lib before 1.1.15 has unknown impact and attack vectors related to libfaad. NOTE: due to the la...

CVE-2008-000310.0

Stack-based buffer overflow in the PAMBasicAuthenticator::PAMCallback function in OpenPegasus CIM management server (tog-pegasus),...