Lucene search
HistoryMay 21, 2007 - 8:30 p.m.
CVE-2007-2769
cve-2007-2769
opendap
hydrax
file upload vulnerability
command execution vulnerability
security advisory
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.8%
BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.
Affected configurations
Node
opendapbesRange≤3.4.2
ORopendaphyraxMatch1.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| opendap:bes | opendap bes | le | 3.4.2 |
| opendap:hyrax | opendap hyrax | eq | 1.2 |
Related
cvelist
cvelist
CVE-2007-2769
2007-05-21 20:00:00
prion
prion
Design/Logic Flaw
2007-05-21 20:30:00
nvd
nvd
CVE-2007-2769
2007-05-21 20:30:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.5 High
AI Score
Confidence
High
0.013 Low
EPSS
Percentile
85.8%
Related for CVE-2007-2769