Vulnerabilities

TI-2008-01287 CVE-2008-1337 · GHSA-hh6r-9f4p-c9xg

The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows…

LOW 26

The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consum…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01719 Published 2008-03-14 No fix listed CWE-20

TI-2008-01071 CVE-2008-1118 · GHSA-29wm-wgxj-3pqf

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input…

LOW 38

Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, does not perform input validation before logging information fields taken from packets from a remote peer, which allows remote attackers to generate crafted…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02937 Published 2008-03-14 No fix listed CWE-20

TI-2008-01070 CVE-2008-1117 · GHSA-53fw-gq2m-wgwv

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages)…

HIGH 80

Directory traversal vulnerability in the Notes (aka Flash Notes or instant messages) feature in tb2ftp.dll in Timbuktu Pro 8.6.5 for Windows, and possibly 8.7 for Mac OS X, allows remote attackers to upload files to arbi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.69473 Published 2008-03-14 No fix listed CWE-22

TI-2002-00131 CVE-2002-0135 · GHSA-9px6-7hr3-26gj

Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of…

LOW 29

Netopia Timbuktu Pro 6.0.1 and earlier allows remote attackers to cause a denial of service (crash) via a series of connections to one of the ports (1417 - 1420).

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03178 Published 2002-03-15 No fix listed

TI-2000-00142 CVE-2000-0142 · GHSA-58hp-w4jf-r5x7

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a…

LOW 34

The authentication protocol in Timbuktu Pro 2.0b650 allows remote attackers to cause a denial of service via connections to port 407 and 1417.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08017 Published 2000-02-16 No fix listed

TI-2000-00086 CVE-2000-0086 · GHSA-jf26-w6c3-33f6

Netopia Timbuktu Pro sends user IDs and passwords in cleartext, which allows remote…