Lucene search

K
nvd[email protected]NVD:CVE-2008-1000
HistoryMar 18, 2008 - 11:44 p.m.

CVE-2008-1000

2008-03-1823:44:00
CWE-22
web.nvd.nist.gov
7

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.009

Percentile

83.1%

Directory traversal vulnerability in ContentServer.py in the Wiki Server in Apple Mac OS X 10.5.2 (aka Leopard) allows remote authenticated users to write arbitrary files via “…” sequences in file attachments.

Affected configurations

Nvd
Node
applemac_os_xMatch10.5.2
OR
applemac_os_x_serverMatch10.5.2
VendorProductVersionCPE
applemac_os_x10.5.2cpe:2.3:o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
applemac_os_x_server10.5.2cpe:2.3:o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*

CVSS2

8.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:S/C:C/I:C/A:C

AI Score

5.8

Confidence

Low

EPSS

0.009

Percentile

83.1%