Lucene search

K
cve[email protected]CVE-2007-5110
HistorySep 26, 2007 - 11:17 p.m.

CVE-2007-5110

2007-09-2623:17:00
CWE-22
web.nvd.nist.gov
30
cve-2007-5110
absolute path traversal
ebcrypt
activex control
remote attackers
file manipulation
security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%

Absolute path traversal vulnerability in the EbCrypt.eb_c_PRNGenerator.1 ActiveX control in EBCRYPT.DLL 2.0.0.2087 and earlier in EB Design ebCrypt allows remote attackers to create or overwrite arbitrary files via a full pathname in the argument to the SaveToFile method. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD
Node
eb_design_pty_ltdebcryptMatch2.0.0.2087

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.02 Low

EPSS

Percentile

89.0%