medium5.0
CVE-2007-3985
Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download ar…
Impact
Directory traversal vulnerability in file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to download arbitrary files via a .. (dot dot) in the name parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Securecomputing | Securityreporter | Version 4.6.3 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=118522960430476&w=2
- http://osvdb.org/43770
- http://secunia.com/advisories/26167
- http://www.oliverkarow.de/research/securityreporter.txt
- http://www.securecomputing.com/index.cfm?skey=1429
- http://www.securityfocus.com/bid/25027
- http://www.securitytracker.com/id?1018443
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35585
- http://marc.info/?l=bugtraq&m=118522960430476&w=2
- http://osvdb.org/43770
- http://secunia.com/advisories/26167
- http://www.oliverkarow.de/research/securityreporter.txt
- http://www.securecomputing.com/index.cfm?skey=1429
- http://www.securityfocus.com/bid/25027
- http://www.securitytracker.com/id?1018443
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35585