CVE-2008-1410 EXPLOIT
4.3
MEDIUM · CVSS 2.0 · EPSS 5.6% (pctl 93)
Patch early
A public exploit exists.
Description
Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.
Scoring
| CVSS | 4.3 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
| EPSS | 5.57% — more likely to be exploited than 93% of all CVEs |
| Weakness | CWE-22 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2008-03-20 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| acronis | snap deploy |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | acronis pxe server 2.0.0.1076 - Directory Traversal / Null Pointer | 2008-03-10 |
References
- http://aluigi.altervista.org/adv/acropxe-adv.txt
- http://secunia.com/advisories/29305
- http://securityreason.com/securityalert/3758
- http://www.securityfocus.com/archive/1/489358/100/0/threaded
- http://www.securityfocus.com/bid/28182
- http://www.vupen.com/english/advisories/2008/0814/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41074
- https://www.exploit-db.com/exploits/5228
- http://aluigi.altervista.org/adv/acropxe-adv.txt
- http://secunia.com/advisories/29305
- http://securityreason.com/securityalert/3758
- http://www.securityfocus.com/archive/1/489358/100/0/threaded
- http://www.securityfocus.com/bid/28182
- http://www.vupen.com/english/advisories/2008/0814/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41074
- https://www.exploit-db.com/exploits/5228
→ the Explorer · watch your stack · NVD