CVE-2008-0673
published 2008-02-12CVE-2008-0673: TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
2.60%
83.4th percentile
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | tintin | < tintin++ 1.97.9-2 (bookworm) | tintin++ 1.97.9-2 (bookworm) |
| tintin | tintin | — | — |
| tintin | wintin | — | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-v8mh-v2p3-87m5: TinTin++ 1
ghsa_unreviewed·2022-05-01
CVE-2008-0673 [HIGH] GHSA-v8mh-v2p3-87m5: TinTin++ 1
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.
OSV
CVE-2008-0673: TinTin++ 1
osv·2008-02-12·CVSS 7.5
CVE-2008-0673 [HIGH] CVE-2008-0673: TinTin++ 1
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.
Debian
CVE-2008-0673: tintin++ - TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-t...
vendor_debian·2008·CVSS 7.5
CVE-2008-0673 [HIGH] CVE-2008-0673: tintin++ - TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-t...
TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory.
Scope: local
bookworm: resolved (fixed in 1.97.9-2)
bullseye: resolved (fixed in 1.97.9-2)
forky: resolved (fixed in 1.97.9-2)
sid: resolved (fixed in 1.97.9-2)
trixie: resolved (fixed in 1.97.9-2)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://aluigi.altervista.org/adv/rintintin-adv.txthttp://secunia.com/advisories/28833http://security.gentoo.org/glsa/glsa-201111-07.xmlhttp://securityreason.com/securityalert/3632http://www.securityfocus.com/archive/1/487687/100/0/threadedhttp://www.securityfocus.com/bid/27660http://www.vupen.com/english/advisories/2008/0449http://aluigi.altervista.org/adv/rintintin-adv.txthttp://secunia.com/advisories/28833http://security.gentoo.org/glsa/glsa-201111-07.xmlhttp://securityreason.com/securityalert/3632http://www.securityfocus.com/archive/1/487687/100/0/threadedhttp://www.securityfocus.com/bid/27660http://www.vupen.com/english/advisories/2008/0449
2008-02-12
Published