Lucene search

MitreCVE-2007-3985

HistoryJul 25, 2007 - 6:30 p.m.

CVE-2007-3985

2007-07-2518:30:00

mitre

web.nvd.nist.gov

cve

2007

3985

directory traversal

vulnerability

secure computing

securityreporter

network security analyzer

remote attackers

arbitrary files

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

80.6%

JSON

Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download arbitrary files via a … (dot dot) in the name parameter.

Affected configurations

Nvd

Node

securecomputingsecurityreporterMatch4.6.3

VendorProductVersionCPE
securecomputingsecurityreporter4.6.3cpe:2.3:a:securecomputing:securityreporter:4.6.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
securecomputing	securityreporter	4.6.3	cpe:2.3:a:securecomputing:securityreporter:4.6.3:::::::*

References

marc.info/?l=bugtraq&m=118522960430476&w=2

osvdb.org/43770

secunia.com/advisories/26167

www.oliverkarow.de/research/securityreporter.txt

www.securecomputing.com/index.cfm?skey=1429

www.securityfocus.com/bid/25027

www.securitytracker.com/id?1018443

exchange.xforce.ibmcloud.com/vulnerabilities/35585

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.7

Confidence

Low

EPSS

0.007

Percentile

80.6%

JSON

Related for CVE-2007-3985