NVD

Id
17147  
Name
CVE-2016-0784  
Description
Directory traversal vulnerability in the Import/Export System Backups functionality in Apache OpenMeetings before 3.1.1 allows remote authenticated administrators to write to arbitrary files via a .. (dot dot) in a ZIP archive entry.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2016-04-11  
Modified Date
2016-04-14  
Seq
2016-0784  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95310 17147 CVE-2016-0784 http://haxx.ml/post/141655340521/all-your-meetings-are-belong-to-us-remote-code  View
95311 17147 CVE-2016-0784 http://openmeetings.apache.org/security.html  View
95312 17147 CVE-2016-0784 http://packetstormsecurity.com/files/136484/Apache-OpenMeetings-3.1.0-Path-Traversal.html  View
95313 17147 CVE-2016-0784 [oss-security] 20160325 [CVE-2016-0784] ZIP file path traversal  View
95314 17147 CVE-2016-0784 20160330 [CVE-2016-0784] Apache OpenMeetings ZIP file path traversal  View
95315 17147 CVE-2016-0784 https://www.apache.org/dist/openmeetings/3.1.1/CHANGELOG  View
95316 17147 CVE-2016-0784 39642  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
1301 JVNDB-2016-002074 Apache OpenMeetings の Import/Export System Backups 機能におけるディレクトリトラバーサルの脆弱性 Apache OpenMeetings の Import/Export System Backups 機能には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2016-0784 86988 CVE-2016-0784 17147 4 6.5 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-002074.html 2016-03-25 2016-04-18 View