CVE

Id
26623  
CVE No.
CVE-2007-3266  
Status
Candidate  
Description
Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. (dot dot) in the outconfig parameter.  
Phase
Assigned (20070619)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
270390 26623 CVE-2007-3266 BUGTRAQ:20070618 Webif.cgi local file inclusion  View
270391 26623 CVE-2007-3266 URL:http://www.securityfocus.com/archive/1/archive/1/471647/100/0/threaded  View
270392 26623 CVE-2007-3266 MISC:http://www.mawk.org/mods.php?mods=Core&page=view&id=102  View
270393 26623 CVE-2007-3266 BID:24516  View
270394 26623 CVE-2007-3266 URL:http://www.securityfocus.com/bid/24516  View
270395 26623 CVE-2007-3266 OSVDB:37508  View
270396 26623 CVE-2007-3266 URL:http://osvdb.org/37508  View
270397 26623 CVE-2007-3266 SECUNIA:25693  View
270398 26623 CVE-2007-3266 URL:http://secunia.com/advisories/25693  View
270399 26623 CVE-2007-3266 SREASON:2816  View
270400 26623 CVE-2007-3266 URL:http://securityreason.com/securityalert/2816  View
270401 26623 CVE-2007-3266 XF:webif-outconfig-file-include(34921)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55321 JVNDB-2007-004013 IBM Tivoli Provisioning Manager for OS Deployment におけるサービス運用妨害 (DoS) の脆弱性 IBM Tivoli Provisioning Manager for OS Deployment の TFTP 実装には、サービス運用妨害 (rembo.exe クラッシュおよびサービス停止) 状態となる脆弱性が存在します。 CVE-2007-3268 26623 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004013.html  View