CVE-2007-4220

Directory traversal vulnerability in Motorola Timbuktu Pro before 8.6.5 for Windows allows remote attackers to create or delete arbitrary files via a .. (dot dot) in a Send request, probably related to the (1) Send and (2) Exchange services.

• CWE-22

• ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=589Patch, Vendor Advisory
• http://secunia.com/advisories/26588Vendor Advisory
• http://www.securityfocus.com/bid/25453Patch
• http://www.securitytracker.com/id?1018614
• http://www.vupen.com/english/advisories/2007/2990
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36273
• ftp://ftp-xo.netopia.com/evaluation/docs/timbuktu/win/865/relnotes/TB2Win865Evalrn.pdf
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=589Patch, Vendor Advisory
• http://secunia.com/advisories/26588Vendor Advisory
• http://www.securityfocus.com/bid/25453Patch
• http://www.securitytracker.com/id?1018614
• http://www.vupen.com/english/advisories/2007/2990
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36273

Published

Aug 29, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-4212Multiple cross-site scripting (XSS) vulnerabilities in the S…
• CVE-2007-4213Palm OS on Treo 650, 680, 700p, and 755p Smart phones allows…
• CVE-2007-4216vsdatant.sys 6.5.737.0 in Check Point Zone Labs ZoneAlarm be…
• CVE-2007-4217Stack-based buffer overflow in the domacro function in ftp i…
• CVE-2007-4218Multiple buffer overflows in the ServerProtect service (Spnt…
• CVE-2007-4219Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv…
• CVE-2007-4221Multiple buffer overflows in Motorola Timbuktu Pro before 8.…
• CVE-2007-4222Buffer overflow in the TagAttributeListCopy function in nnot…
• CVE-2007-4223Dbgv.sys in Microsoft Sysinternals DebugView before 4.72 pro…
• CVE-2007-4224KDE Konqueror 3.5.7 allows remote attackers to spoof the URL…
• CVE-2007-4225Visual truncation vulnerability in KDE Konqueror 3.5.7 allow…
• CVE-2007-4226Directory traversal vulnerability in the BlueCat Networks Pr…