CVE

Id
26126  
CVE No.
CVE-2007-2769  
Status
Candidate  
Description
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.  
Phase
Assigned (20070521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
263020 26126 CVE-2007-2769 CONFIRM:http://www.opendap.org/security.html  View
263021 26126 CVE-2007-2769 CERT-VN:VU#659148  View
263022 26126 CVE-2007-2769 URL:http://www.kb.cert.org/vuls/id/659148  View
263023 26126 CVE-2007-2769 BID:24055  View
263024 26126 CVE-2007-2769 URL:http://www.securityfocus.com/bid/24055  View
263025 26126 CVE-2007-2769 VUPEN:ADV-2007-1887  View
263026 26126 CVE-2007-2769 URL:http://www.vupen.com/english/advisories/2007/1887  View
263027 26126 CVE-2007-2769 OSVDB:35487  View
263028 26126 CVE-2007-2769 URL:http://osvdb.org/35487  View
263029 26126 CVE-2007-2769 SECUNIA:25319  View
263030 26126 CVE-2007-2769 URL:http://secunia.com/advisories/25319  View
263031 26126 CVE-2007-2769 XF:opendap-beshyrax-compressed-code-execution(34408)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55187 JVNDB-2007-003879 LEAD Technologies の LeadTools におけるスタックベースのバッファオーバーフローの脆弱性 LEAD Technologies LeadTools JPEG 2000 LEADJ2K.LEADJ2K.140 ActiveX コントロール (LTJ2K14.ocx) には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2771 26126 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003879.html  View