CVE-2008-1962: Multiple directory traversal vulnerabilities in Aterr 0.9.1 allow remote attackers to include and execute a...

Security readout for executives and security teams

Aterr 0.9.1 has directory traversal flaws that can let a remote attacker make the application include and execute local files. For an exposed legacy deployment, this could compromise the web application or underlying server context. The provided sources do not name a vendor patch or show active exploitation. Exposure is likely limited to organizations still running Aterr 0.9.1 with the affected PHP include endpoints reachable by remote users. The source metadata lacks CPEs and detailed product ownership, so asset identification may require application inventory and code review. Prioritize if Aterr 0.9.1 is internet-facing or supports sensitive workflows. This is an old, likely legacy exposure, but the potential impact is serious where present. If no deployment exists, record the rationale and deprioritize. Mitigation focus: Identify and remove or replace any remaining Aterr 0.9.1 deployments.; Check vendor or maintainer guidance for patched versions or official workarounds.; Restrict public access to affected include paths until remediation is confirmed..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.