← Back

CVE-2008-2717

nvd nist
Published: Jun 16, 2008Modified: Apr 23, 2026

JSON object

Loading...
6.5
Vector
AV:N/AC:L/Au:S/C:P/I:P/A:P
Exploitability: 8.0 / Impact: 6.4
Source: NVD

Description

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

Affected (18)

Apache
1 product
Apache Webserver
Typo3
1 product
Typo3
Configuration A
18 vulnerable
Vulnerable SoftwareAffected Versions
Apache Webserver
All versions
Typo3
Typo3
Version 4.0.1
Typo3
Version 4.0.2
Typo3
Version 4.0.3
Typo3
Version 4.0.4
Typo3
Version 4.0.5
Typo3
Version 4.0.6
Typo3
Version 4.0.7
Typo3
Version 4.0.8
Typo3
Version 4.0
Typo3
Version 4.1.1
Typo3
Version 4.1.2
Typo3
Version 4.1.3
Typo3
Version 4.1.4
Typo3
Version 4.1.5
Typo3
Version 4.1.6
Typo3
Version 4.1
Typo3
Version 4.2

Related CWEs

CWE-264
CWE-264

References (20)

Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.