medium5.5
CVE-2007-6383
The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbi…
Impact
The DAV component in Chandler Server (Cosmo) before 0.10.1 does not check resource creation permissions, which allows remote authenticated users to create arbitrary resources in another user's home collection.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chandler Project | Chandler Server | through 0.10 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.osafoundation.org/pipermail/cosmo-dev/2007-December/005442.html
- http://osvdb.org/44152
- http://www.vupen.com/english/advisories/2007/4214
- https://bugzilla.osafoundation.org/show_bug.cgi?id=11587
- http://lists.osafoundation.org/pipermail/cosmo-dev/2007-December/005442.html
- http://osvdb.org/44152
- http://www.vupen.com/english/advisories/2007/4214
- https://bugzilla.osafoundation.org/show_bug.cgi?id=11587