CVE

Id
26615  
CVE No.
CVE-2007-3258  
Status
Candidate  
Description
calendar.php in Calendarix 0.7.20070307 allows remote attackers to obtain sensitive information via large values to the (1) year and (2) month parameters, which causes negative values to be passed to the mktime library call, and reveals the installation path in the error message.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270302 26615 CVE-2007-3258 BUGTRAQ:20070625 Calendarix version 0.7. 20070307 Multiple Path Disclosure  View
270303 26615 CVE-2007-3258 URL:http://marc.info/?l=bugtraq&m=118279128017628&w=2  View
270304 26615 CVE-2007-3258 FULLDISC:20070625 Calendarix version 0.7. 20070307 Multiple Path Disclosure  View
270305 26615 CVE-2007-3258 URL:http://marc.info/?l=full-disclosure&m=118279031307874&w=2  View
270306 26615 CVE-2007-3258 MISC:http://www.netvigilance.com/advisory0035  View
270307 26615 CVE-2007-3258 OSVDB:35371  View
270308 26615 CVE-2007-3258 URL:http://www.osvdb.org/35371  View
270309 26615 CVE-2007-3258 XF:calendarix-calendar-path-disclosure(35047)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55319 JVNDB-2007-004011 Linux 用の HP SMH における権限を取得される脆弱性 Linux 用の HP System Management Homepage (SMH) は、Novell eDirectory と併用して使用されている際、eDirectory メンバをルートグループへ割り当てるため、権限を取得される脆弱性が存在します。 CVE-2007-3260 26615 9 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004011.html  View