CVE-2008-1178 - Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .

Back Back to CVE browser

MEDIUM

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .

Published Mar 6, 2008

4.3

MEDIUM

CVSS 2.0

EPSS 5.20%

Description

Directory traversal vulnerability in include/doc/index.php in Centreon 1.4.2.3 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter, a different vector than CVE-2008-1119.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (6)

http://secunia.com/advisories/29158
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/3715
third-party-advisoryx_refsource_SREASON
http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html
x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/488956/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28052
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/40950
vdb-entryx_refsource_XF

Link	Providers	Tags
http://secunia.com/advisories/29158		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securityreason.com/securityalert/3715		third-party-advisoryx_refsource_SREASON
http://www.centreon.com/Product/Changelog-Centreon-1.4.x.html		x_refsource_CONFIRM
http://www.securityfocus.com/archive/1/488956/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/28052		vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/40950		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 6, 2008

Updated Aug 7, 2024

Reserved Mar 5, 2008

Link CVE-2008-1178

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2008-1178

Red Hat

Severity n/a

Public date n/a

Links CVE-2008-1178