Lucene search

[email protected]CVE-2007-6317

HistoryDec 12, 2007 - 12:46 a.m.

CVE-2007-6317

2007-12-1200:46:00

CWE-22

[email protected]

web.nvd.nist.gov

barracudadrive

web server

directory traversal

vulnerability

security

cve-2007-6317

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

JSON

Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain …\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a …\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.

Affected configurations

NVD

Node

real_time_logicbarracudadrive_web_serverMatch3.7.2

real_time_logicbarracudadrive_web_server_home_serverMatch3.7.2

CPENameOperatorVersion
real_time_logic:barracudadrive_web_serverreal time logic barracudadrive web servereq3.7.2
real_time_logic:barracudadrive_web_server_home_serverreal time logic barracudadrive web server home servereq3.7.2

CPE	Name	Operator	Version
real_time_logic:barracudadrive_web_server	real time logic barracudadrive web server	eq	3.7.2
real_time_logic:barracudadrive_web_server_home_server	real time logic barracudadrive web server home server	eq	3.7.2

References

aluigi.altervista.org/adv/barradrive-adv.txt

secunia.com/advisories/28032

securityreason.com/securityalert/3434

www.securityfocus.com/archive/1/484833/100/0/threaded

www.securityfocus.com/bid/26805

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

JSON

Related for CVE-2007-6317

nvd1 prion1 cvelist1