CVE-2007-2747
Published May 17, 2007
Last updated 7 years ago
Overview
- Description
- Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6B5D1FF1-5AA5-471E-89F9-942F8D7B6D53",
"versionEndIncluding": "0.3.5"
},
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B637DC48-A7D5-42E4-A6F7-81EEBE6504CF"
},
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BB8ACCDF-6601-4473-ACF4-F6AE1537B5B9"
},
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A1B436A5-10DF-4B8D-8B09-19702E2E0AD7"
},
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:0.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "44517C3D-AC20-45C4-83EE-F6D4A1A0A1F4"
},
{
"criteria": "cpe:2.3:a:rdiffweb:rdiffweb:0.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "482EBAF2-2E67-46B8-87BF-8E934550231D"
}
],
"operator": "OR"
}
]
}
]