CVE-2008-1643

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-02 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.7 SP5 and earlier and 8.8 allows remote attackers to read arbitrary files via unspecified vectors.

Affected products

Landesk Software Landesk Management Suite: through 8.7; 8.8

References

http://community.landesk.com/support/docs/DOC-2659
http://secunia.com/advisories/29324
http://www.securityfocus.com/bid/28535
http://www.securitytracker.com/id?1019748
http://www.vupen.com/english/advisories/2008/1051/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41562
http://community.landesk.com/support/docs/DOC-2659
http://secunia.com/advisories/29324
http://www.securityfocus.com/bid/28535
http://www.securitytracker.com/id?1019748
http://www.vupen.com/english/advisories/2008/1051/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41562

Get alerted when CVE-2008-1643 or the next vulnerability affects your stack