Lucene search

K
cvelistMitreCVELIST:CVE-2007-0159
HistoryJan 10, 2007 - 12:00 a.m.

CVE-2007-0159

2007-01-1000:00:00
mitre
raw.githubusercontent.com
1

6.5 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%

Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers (possibly only update.maxmind.com) to overwrite arbitrary files via a … (dot dot) in the database filename, which is returned by a request to app/update_getfilename.

6.5 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

89.9%