{"vulnerability": "CVE-2008-2439", "sightings": [{"uuid": "828abc1c-83e7-44ce-b2c5-f662c70b29e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2439", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "0de3a5f5-cadd-434c-b68e-8402cdc5151a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2439", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:29.000000Z"}, {"uuid": "ed4781e5-2132-4b7c-be78-a332aba51a10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2439", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/officescan/tmlisten_traversal.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "9e9ee9de-3c7e-4594-8330-ce94a12eb738", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-2439", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/officescan/tmlisten_traversal.rb", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"Anshul Pandey \", \"aushack \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": false, \"default_credential\": false, \"description\": \"This module tests for directory traversal vulnerability in the UpdateAgent\\n        function in the OfficeScanNT Listener (TmListen.exe) service in Trend Micro\\n        OfficeScan. This allows remote attackers to read arbitrary files as SYSTEM\\n        via dot dot sequences in an HTTP request.\", \"disclosure_date\": null, \"fullname\": \"auxiliary/admin/officescan/tmlisten_traversal\", \"is_install_path\": true, \"mod_time\": \"2025-05-21 08:32:40 +0000\", \"name\": \"TrendMicro OfficeScanNT Listener Traversal Arbitrary File Access\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/admin/officescan/tmlisten_traversal.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"admin/officescan/tmlisten_traversal\", \"references\": [\"OSVDB-48730\", \"CVE-2008-2439\", \"BID-31531\", \"URL-http://www.trendmicro.com/ftp/documentation/readme/OSCE_7.3_Win_EN_CriticalPatch_B1372_Readme.txt\"], \"rport\": 26122, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:46:54.121630Z"}]}