high7.8Public exploit code
CVE-2007-4062
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nessus Vulnerability Scanner 3.0.6 - ActiveX Command Execution2007-07-27 · remote · windows · Verified
Impact
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nessus | Vulnerability Scanner | Version 3.0.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/26243
- http://www.nessus.org/news/
- http://www.securityfocus.com/bid/25088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35641
- http://secunia.com/advisories/26243
- http://www.nessus.org/news/
- http://www.securityfocus.com/bid/25088
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35641