Lucene search

K
cve[email protected]CVE-2007-6378
HistoryDec 15, 2007 - 1:46 a.m.

CVE-2007-6378

2007-12-1501:46:00
CWE-22
web.nvd.nist.gov
19
cve-2007-6378
directory traversal
badblue
security vulnerability
upload.dll

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.5%

Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a … (dot dot) in the filename parameter.

CPENameOperatorVersion
badblue:badbluebadbluele2.72b

6.9 Medium

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.014 Low

EPSS

Percentile

86.5%

Related for CVE-2007-6378