CVE-2007-6317

Опубликовано: 12 дек. 2007

Источник: nvd

CVSS2: 5.5

EPSS Низкий

Описание

Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.

Ссылки

http://aluigi.altervista.org/adv/barradrive-adv.txt
Exploit
http://secunia.com/advisories/28032
Vendor Advisory
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/archive/1/484833/100/0/threaded
http://www.securityfocus.com/bid/26805
Exploit
Patch
http://aluigi.altervista.org/adv/barradrive-adv.txt
Exploit
http://secunia.com/advisories/28032
Vendor Advisory
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/archive/1/484833/100/0/threaded
http://www.securityfocus.com/bid/26805
Exploit
Patch

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:real_time_logic:barracudadrive_web_server:3.7.2:*:*:*:*:*:*:*

cpe:2.3:a:real_time_logic:barracudadrive_web_server_home_server:3.7.2:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04032

Низкий

5.5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-9h5w-jf8c-9fjh

github

почти 4 года назад