critical9.3Public exploit code
CVE-2007-4067
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote att…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite2007-07-25 · remote · windows · Verified
Impact
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Clever Components | Internet Activex Suite | through 6.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/26213
- http://www.attrition.org/pipermail/vim/2007-July/001729.html
- http://www.securityfocus.com/bid/25063
- http://www.vupen.com/english/advisories/2007/2659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35590
- https://www.exploit-db.com/exploits/4226
- http://secunia.com/advisories/26213
- http://www.attrition.org/pipermail/vim/2007-July/001729.html
- http://www.securityfocus.com/bid/25063
- http://www.vupen.com/english/advisories/2007/2659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35590
- https://www.exploit-db.com/exploits/4226