NVD

Id
58400  
Name
CVE-2007-6405  
Description
Sergey Lyubka Simple HTTPD (shttpd) 1.38 and earlier on Windows allows remote attackers to download arbitrary CGI programs or scripts via a URI with an appended (1) "+" character, (2) "." character, (3) %2e sequence (hex-encoded dot), or (4) hex-encoded character greater than 0x7f. NOTE: the %20 vector is already covered by CVE-2007-3407.  
Reject
 
CVSS Version
2  
CVSS Score
6.4  
Severity
Medium  
CVSS Base Score
6.4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-12-17  
Modified Date
2008-11-15  
Seq
2007-6405  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
299525 58400 CVE-2007-6405 http://aluigi.altervista.org/adv/shttpd-adv.txt  View
299526 58400 CVE-2007-6405 3457  View
299527 58400 CVE-2007-6405 [shttpd-general] 20071203 Security bugs in SHTTPD  View
299528 58400 CVE-2007-6405 4700  View
299529 58400 CVE-2007-6405 20071207 Two vulnerabilities in Simple HTTPD 1.38  View
299530 58400 CVE-2007-6405 26768  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57745 JVNDB-2007-006437 Windows 上で稼動している shttpd における任意の CGI プログラムをダウンロードされる脆弱性 Windows 上で稼動している Sergey Lyubka Simple HTTPD (shttpd) には、任意の CGI プログラム、およびスクリプトをダウンロードされる脆弱性が存在します。 CVE-2007-6405 29760 CVE-2007-6405 58400 6.4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-006437.html 2007-12-17 2012-12-20 View