CVE

Id
29969  
CVE No.
CVE-2007-6612  
Status
Candidate  
Description
Directory traversal vulnerability in DirHandler (lib/mongrel/handlers.rb) in Mongrel 1.0.4 and 1.1.x before 1.1.3 allows remote attackers to read arbitrary files via an HTTP request containing double-encoded sequences (".%252e").  
Phase
Assigned (20080103)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
317082 29969 CVE-2007-6612 MLIST:[Mongrel] 20071228 Arbitrary system files readable in 1.0.4 - 1.1.2  View
317083 29969 CVE-2007-6612 URL:http://rubyforge.org/pipermail/mongrel-users/2007-December/004733.html  View
317084 29969 CVE-2007-6612 MLIST:[Mongrel] 20071228 Arbitrary system files readable in 1.0.4 - 1.1.2  View
317085 29969 CVE-2007-6612 URL:http://rubyforge.org/pipermail/mongrel-users/2007-December/004736.html  View
317086 29969 CVE-2007-6612 MLIST:[Mongrel] 20071229 Regarding the 1.1.3 security release  View
317087 29969 CVE-2007-6612 URL:http://rubyforge.org/pipermail/mongrel-users/2007-December/004742.html  View
317088 29969 CVE-2007-6612 MLIST:[Mongrel] [SECURITY] Must Fix This Now! (Re: Arbitrary system files readable in 1.0.4 - 1.1.2)  View
317089 29969 CVE-2007-6612 URL:http://rubyforge.org/pipermail/mongrel-users/2007-December/004743.html  View
317090 29969 CVE-2007-6612 CONFIRM:http://mongrel.rubyforge.org/news.html  View
317091 29969 CVE-2007-6612 APPLE:APPLE-SA-2008-05-28  View
317092 29969 CVE-2007-6612 URL:http://lists.apple.com/archives/security-announce/2008//May/msg00001.html  View
317093 29969 CVE-2007-6612 CERT:TA08-150A  View
317094 29969 CVE-2007-6612 URL:http://www.us-cert.gov/cas/techalerts/TA08-150A.html  View
317095 29969 CVE-2007-6612 BID:27133  View
317096 29969 CVE-2007-6612 URL:http://www.securityfocus.com/bid/27133  View
317097 29969 CVE-2007-6612 VUPEN:ADV-2008-1697  View
317098 29969 CVE-2007-6612 URL:http://www.vupen.com/english/advisories/2008/1697  View
317099 29969 CVE-2007-6612 OSVDB:39866  View
317100 29969 CVE-2007-6612 URL:http://osvdb.org/39866  View
317101 29969 CVE-2007-6612 SECUNIA:28323  View
317102 29969 CVE-2007-6612 URL:http://secunia.com/advisories/28323  View
317103 29969 CVE-2007-6612 SECUNIA:30430  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47229 JVNDB-2008-002539 Agares Media phpAutoVideo の admin/frontpage_right.php における PHP リモートファイルインクルージョンの脆弱性 Agares Media phpAutoVideo の admin/frontpage_right.php には、PHP リモートファイルインクルージョンの脆弱性が存在します。 CVE-2007-6614 29969 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002539.html  View