medium5.5Public exploit code
CVE-2007-6317
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot do…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- barracudadrive 3.7.2 - Multiple Vulnerabilities2007-12-10 · remote · windows · Verified
Impact
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Real Time Logic | Barracudadrive Web Server | Version 3.7.2 |
| Real Time Logic | Barracudadrive Web Server Home Server | Version 3.7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/barradrive-adv.txt
- http://secunia.com/advisories/28032
- http://securityreason.com/securityalert/3434
- http://www.securityfocus.com/archive/1/484833/100/0/threaded
- http://www.securityfocus.com/bid/26805
- http://aluigi.altervista.org/adv/barradrive-adv.txt
- http://secunia.com/advisories/28032
- http://securityreason.com/securityalert/3434
- http://www.securityfocus.com/archive/1/484833/100/0/threaded
- http://www.securityfocus.com/bid/26805