CVE

Id
27388  
CVE No.
CVE-2007-4031  
Status
Candidate  
Description
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.  
Phase
Assigned (20070727)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
281664 27388 CVE-2007-4031 MILW0RM:4230  View
281665 27388 CVE-2007-4031 URL:http://www.milw0rm.com/exploits/4230  View
281666 27388 CVE-2007-4031 MISC:http://www.nessus.org/news/  View
281667 27388 CVE-2007-4031 BID:25088  View
281668 27388 CVE-2007-4031 URL:http://www.securityfocus.com/bid/25088  View
281669 27388 CVE-2007-4031 VUPEN:ADV-2007-2680  View
281670 27388 CVE-2007-4031 URL:http://www.vupen.com/english/advisories/2007/2680  View
281671 27388 CVE-2007-4031 SECTRACK:1018469  View
281672 27388 CVE-2007-4031 URL:http://securitytracker.com/id?1018469  View
281673 27388 CVE-2007-4031 SECUNIA:26243  View
281674 27388 CVE-2007-4031 URL:http://secunia.com/advisories/26243  View
281675 27388 CVE-2007-4031 XF:nessus-scanctrl-file-overwrite(35641)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52249 JVNDB-2007-000939 t1lib の intT1_EnvGetCompletePath () 関数におけるバッファオーバーフローの脆弱性 t1lib には lib/t1lib/t1env.c の intT1_EnvGetCompletePath() 関数において、FileName パラメータの取り扱いに不備があり、バッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4033 27388 3.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000939.html  View