CVE-2008-4067: canonical ubuntu_linux Path Traversal

CVSS: 4.3v2.0MediumModified

Published 24-09-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-4067 is a medium (CVSS 4.3) Path Traversal vulnerability in canonical ubuntu_linux. EPSS estimates a 4.44% chance of exploitation in the next 30 days, higher than 91.2% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk

28/100

0100

Medium · default modelHow is this calculated?

CVSS score

4.3/10

010

Medium · v2.0 (NVD)

EPSS score

4.44%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 8 · Related 1

DSA-1649-1 DSA-1669-1 DSA-1696-1 DSA-1697-1 OPENSUSE-SU-2024:10601-1 RHSA-2008:0879+2 more

Timeline

24-09-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 on Linux allows remote attackers to read arbitrary files via a .. (dot dot) and URL-encoded / (slash) characters in a resource: URI.

CVSS metrics

1 score · 1 source · 1 version

v2.04.3

EPSS trend

Probability

4.44%

Chance of exploitation in the next 30 days

Percentile

91%

Versus all other CVEs

30-day change

0.00 pp

From 4.44% on 20-09-2026

20-09-202620-10-2026

EPSS score

4.44%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown
referenceUnverified
Exploit Reference (bugzilla.mozilla.org)
Maturity: unknown

Weaknesses

CWE · root cause

CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

Affected systems

Mozilla3 products

firefox< 2.0.0.17 | ≥ 3.0, < 3.0.2
seamonkey< 1.1.12
thunderbird< 2.0.0.17

Canonical1 product

ubuntu_linuxEOL6.06 | 7.04 | 7.10 | 8.04

Debian1 product

debian_linuxEOL4.0

3 vendors · 5 products

References

53 links

secunia.com/advisories/32025Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32011Third Party AdvisoryX Refsource SECUNIA
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10770VDB EntrySignatureX Refsource OVALThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.405232Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
www.debian.org/security/2009/dsa-1697Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/32096Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-September/msg01384.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.ubuntu.com/usn/usn-645-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:206Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
secunia.com/advisories/32144Third Party AdvisoryX Refsource SECUNIA

Show all 53 references

exchange.xforce.ibmcloud.com/vulnerabilities/45359VDB EntryX Refsource XFThird Party Advisory
secunia.com/advisories/32010Third Party AdvisoryX Refsource SECUNIA
www.securitytracker.com/id?1020921VDB EntryX Refsource SECTRACKThird Party Advisory
www.vupen.com/english/advisories/2009/0977VDB EntryX Refsource VUPENThird Party Advisory
www.ubuntu.com/usn/usn-645-2Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
www.securityfocus.com/bid/31346VDB EntryX Refsource BIDThird Party Advisory
secunia.com/advisories/31985Third Party AdvisoryX Refsource SECUNIA
lists.opensuse.org/opensuse-security-announce/2008-10/msg00005.htmlVendor AdvisoryX Refsource SUSEThird Party Advisory
secunia.com/advisories/31984Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32185Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32196Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/archives/fedora-package-announce/2008-September/msg01335.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
www.debian.org/security/2008/dsa-1669Vendor AdvisoryX Refsource DEBIANThird Party Advisory
www.mozilla.org/security/announce/2008/mfsa2008-44.htmlX Refsource CONFIRMVendor Advisory
secunia.com/advisories/32042Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33433Third Party AdvisoryX Refsource SECUNIA
www.vupen.com/english/advisories/2008/2661VDB EntryX Refsource VUPENThird Party Advisory
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.379422Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
secunia.com/advisories/32095Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32089Third Party AdvisoryX Refsource SECUNIA
sunsolve.sun.com/search/document.do?assetkey=1-26-256408-1Vendor AdvisoryX Refsource SUNALERTBroken Link
secunia.com/advisories/32092Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0879.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
www.mandriva.com/security/advisories?name=MDVSA-2008:205Vendor AdvisoryX Refsource MANDRIVAThird Party Advisory
bugzilla.mozilla.org/show_bug.cgi?id=380994X Refsource CONFIRMExploitIssue TrackingVendor Advisory
bugzilla.mozilla.org/show_bug.cgi?id=394075X Refsource CONFIRMExploitIssue TrackingVendor Advisory
www.debian.org/security/2009/dsa-1696Vendor AdvisoryX Refsource DEBIANThird Party Advisory
download.novell.com/Download?buildid=WZXONb-tqBw~X Refsource CONFIRMThird Party Advisory
www.0x000000.com?i=422X Refsource MISCThird Party Advisory
www.redhat.com/archives/fedora-package-announce/2008-September/msg01403.htmlVendor AdvisoryX Refsource FEDORAThird Party Advisory
secunia.com/advisories/31987Third Party AdvisoryX Refsource SECUNIA
www.ubuntu.com/usn/usn-647-1Vendor AdvisoryX Refsource UBUNTUThird Party Advisory
secunia.com/advisories/32007Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0882.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/32845Third Party AdvisoryX Refsource SECUNIA
www.debian.org/security/2008/dsa-1649Vendor AdvisoryX Refsource DEBIANThird Party Advisory
secunia.com/advisories/32012Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33434Third Party AdvisoryX Refsource SECUNIA
slackware.com/security/viewer.php?l=slackware-security&y=2008&m=slackware-security.412123Vendor AdvisoryX Refsource SLACKWAREThird Party Advisory
secunia.com/advisories/32044Third Party AdvisoryX Refsource SECUNIA
www.redhat.com/support/errata/RHSA-2008-0908.htmlVendor AdvisoryX Refsource REDHATThird Party Advisory
secunia.com/advisories/34501Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/32082Third Party AdvisoryX Refsource SECUNIA

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities