CVE-2024-0818: Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

PriorityP355critical9.1CVSS 3.1

AVNACLPRNUINSUCNIHAH

EPSS

1.05%

59.9th percentile

Arbitrary File Overwrite Via Path Traversal in paddlepaddle/paddle before 2.6

Affected

3 ranges

Vendor	Product	Version range	Fixed in
paddlepaddle	paddlepaddle	< 2.6.0	2.6.0
paddlepaddle	paddlepaddle	0 – 2.6.0	—
paddlepaddle	paddlepaddle_paddle	unspecified – latest	—

CVSS provenance

nvdv3.19.1CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

nvdv3.09.1CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

Suricata

GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt

suricata·2010-09-23

CVE-2003-0818 GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt Rule: alert http1 $EXTERNAL_NET any -> $HTTP_SERVERS any (msg:"GPL EXPLOIT NTLM ASN.1 vulnerability scan attempt"; flow:established,to_server; http.header; content:"Authorization|3A| Negotiate YIQAAABiBoMAAAYrBgEFBQKgggBTMIFQoA4wDAYKKwYBBAGCNwICCqM"; reference:bugtraq,9633; reference:bugtraq,9635; reference:cve,2003-0818; reference:nessus,12052; reference:nessus,12055; reference:nessus,12065; reference:url,www.microsoft.com/technet/security/bulletin/MS04-007.mspx; classtype:attempted-dos; sid:2102386; rev:14; metadata:created_at 2010_09_23, cve CVE_2003_0818, signature_severity Major, updated_at 2024_04_03;)

Suricata

GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt

suricata·2010-09-23

CVE-2003-0818 GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 445 (msg:"GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt"; flow:established,to_server; content:"|FF|SMBs"; depth:5; offset:4; nocase; content:"`"; depth:1; offset:63; content:"|00 00 00|b|06 83 00 00 06|+|06 01 05 05 02|"; within:15; distance:1; content:"|06 0A|+|06 01 04 01 82|7|02 02 0A|"; distance:0; content:"|A3|>0<|A0|0"; distance:0; reference:bugtraq,9633; reference:bugtraq,9635; reference:cve,2003-0818; reference:nessus,12052; reference:nessus,12054; reference:nessus,12065; classtype:attempted-dos; sid:2102385; rev:13; metadata:created_at 2010_09_23, cve CVE_2003_0818, confidence Medium, signature_severity Informational, updated_at 2024_03_08;)

Suricata

GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt

suricata·2010-09-23

CVE-2003-0818 GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt Rule: alert tcp $EXTERNAL_NET any -> $HOME_NET 139 (msg:"GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt"; flow:established,to_server; content:"|FF|SMBs"; depth:5; offset:4; nocase; content:"`"; depth:1; offset:63; content:"|00 00 00|b|06 83 00 00 06|+|06 01 05 05 02|"; within:15; distance:1; content:"|06 0A|+|06 01 04 01 82|7|02 02 0A|"; distance:0; content:"|A3|>0<|A0|0"; distance:0; reference:bugtraq,9633; reference:bugtraq,9635; reference:cve,2003-0818; reference:nessus,12052; reference:nessus,12054; reference:nessus,12065; classtype:attempted-dos; sid:2102384; rev:12; metadata:created_at 2010_09_23, cve CVE_2003_0818, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)