CVE-2008-1000

2008-03-1823:44:00

CWE-22

mitre

web.nvd.nist.gov

apple

mac os x

10.5.2

wiki server

directory traversal

vulnerability

remote authentication

arbitrary files

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

8.3

Confidence

High

EPSS

0.009

Percentile

83.1%

JSON

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via “…” sequences in file attachments.

Affected configurations

Nvd

Node

applemac_os_xMatch10.5.2

applemac_os_x_serverMatch10.5.2

VendorProductVersionCPE
applemac_os_x10.5.2cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
applemac_os_x_server10.5.2cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*