CVE-2008-2511

no score yetEPSS 10%

Directory traversal vulnerability in the UmxEventCli.CachedAuditDataList.1 (aka UmxEventCliLib) ActiveX control in UmxEventCli.dll in CA Internet Security Suite 2008 allows remote attackers to create and overwrite arbitrary files via a .. (dot dot) in the argument to the SaveToFile method. NOTE: this can be leveraged for code execution by writing to a Startup folder. NOTE: some of these details are obtained from third party information.

EPSS: 10% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE: CWE-22
Published: 2008-06-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ca:internet_security_suite_plus_2008

References

http://retrogod.altervista.org/9sg_CA_poc.html
http://secunia.com/advisories/30420
http://www.securityfocus.com/archive/1/492679/100/0/threaded
http://www.securitytracker.com/id?1020129
http://www.vupen.com/english/advisories/2008/1696/references

Check your stack JSON