CVE

Id
29718  
CVE No.
CVE-2007-6361  
Status
Candidate  
Description
Gekko 0.8.2 and earlier stores sensitive information under the web root with possibly insufficient access control, which might allow remote attackers to read certain files under temp/, as demonstrated by a log file that records the titles of blog entries. NOTE: access to temp/ is blocked by .htaccess in most deployments that use Apache HTTP Server.  
Phase
Assigned (20071214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
313571 29718 CVE-2007-6361 BUGTRAQ:20071128 Gekko <=0.8.2 (temp directory) Path Disclosure  View
313572 29718 CVE-2007-6361 URL:http://www.securityfocus.com/archive/1/archive/1/484330/100/0/threaded  View
313573 29718 CVE-2007-6361 BUGTRAQ:20071128 Re: Gekko <=0.8.2 (temp directory) Path Disclosure  View
313574 29718 CVE-2007-6361 URL:http://www.securityfocus.com/archive/1/archive/1/484343/100/0/threaded  View
313575 29718 CVE-2007-6361 OSVDB:44151  View
313576 29718 CVE-2007-6361 URL:http://osvdb.org/44151  View
313577 29718 CVE-2007-6361 SREASON:3451  View
313578 29718 CVE-2007-6361 URL:http://securityreason.com/securityalert/3451  View
313579 29718 CVE-2007-6361 XF:gekko-temp-directory-path-disclosure(38735)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56027 JVNDB-2007-004719 IBM Tivoli Netcool Security Manager におけるログインアクセス権を取得される脆弱性 IBM Tivoli Netcool Security Manager には、Active Directory (AD) LDAP 認証が使用されている際、ログインアクセス権を取得される脆弱性が存在します。 CVE-2007-6363 29718 2.1 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004719.html  View