CVE-2007-6404

Опубликовано: 17 дек. 2007

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Directory traversal vulnerability in Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the URI.

Ссылки

http://aluigi.altervista.org/adv/shttpd-adv.txt
Exploit
http://osvdb.org/44013
http://securityreason.com/securityalert/3457
http://sourceforge.net/mailarchive/forum.php?thread_name=20071203130540.6e482c20.aluigi%40autistici.org&forum_name=shttpd-general
Exploit
http://www.securityfocus.com/archive/1/484761/100/0/threaded
http://www.securityfocus.com/bid/26768
Exploit
https://www.exploit-db.com/exploits/4700
http://aluigi.altervista.org/adv/shttpd-adv.txt
Exploit
http://osvdb.org/44013
http://securityreason.com/securityalert/3457
http://sourceforge.net/mailarchive/forum.php?thread_name=20071203130540.6e482c20.aluigi%40autistici.org&forum_name=shttpd-general
Exploit
http://www.securityfocus.com/archive/1/484761/100/0/threaded
http://www.securityfocus.com/bid/26768
Exploit
https://www.exploit-db.com/exploits/4700

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

cpe:2.3:a:shttp:shttp:*:*:*:*:*:*:*:*

Версия до 1.38 (включая)

EPSS

Процентиль: 93%

0.10857

Средний

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-v7pj-7g9v-fwwh

github

почти 4 года назад