|
|
CVE Reference: CVE-2007-4226 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2007-4226 |
|
|
Description: Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8) allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. (dot dot) in a pathname. NOTE: this can be leveraged for administrative access by overwriting /etc/shadow. |
|
|
CVE Status: Candidate |
|
|
References: XF http://xforce.iss.net/xforce/xfdb/35807 ST 1018521 SREASON http://securityreason.com/securityalert/2986 SAID Secunia Advisory: SA26354 OSVDB 39397 BUGTRAQ http://marc.info/?l=bugtraq&m=118669433531027&w=2 http://www.securityfocus.com/archive/1/archive/1/475667/100/0/threaded BID 25214 |
|
| Return to the previous page. |
