CVE-2007-5742

2007-12-0100:00:00

ubuntu.com

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:P/I:P/A:C

EPSS

0.015

Percentile

87.1%

JSON

Directory traversal vulnerability in the WML engine preprocessor for
Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote
attackers to read arbitrary files via “…” sequences in unknown vectors.

Bugs

<https://bugs.launchpad.net/ubuntu/gutsy/+source/wesnoth/+bug/173881>

OSVersionArchitecturePackageVersionFilename
ubuntu6.06noarchwesnoth< 1.1+reverted+to+1.0.2-0ubuntu1.2UNKNOWN
ubuntu6.10noarchwesnoth< 1.1.8-1ubuntu0.2UNKNOWN
ubuntu7.04noarchwesnoth< 1.2.3-0ubuntu1.1UNKNOWN
ubuntu7.10noarchwesnoth< 1.2.6-1ubuntu2.2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	6.06	noarch	wesnoth	< 1.1+reverted+to+1.0.2-0ubuntu1.2	UNKNOWN
ubuntu	6.10	noarch	wesnoth	< 1.1.8-1ubuntu0.2	UNKNOWN
ubuntu	7.04	noarch	wesnoth	< 1.2.3-0ubuntu1.1	UNKNOWN
ubuntu	7.10	noarch	wesnoth	< 1.2.6-1ubuntu2.2	UNKNOWN