Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-5413
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-5413

Description:
httpd.tkd in Radia Integration Server in Hewlett-Packard (HP) OpenView Configuration Management (CM) Infrastructure 4.0 through 4.2i and Client Configuration Manager (CCM) 2.0 allows remote attackers to read arbitrary files via URLs containing tilde (~) references to home directories, as demonstrated by ~root.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/37400

ST
  1018858

SAID
  Secunia Advisory: SA27341

OSVDB
  39528

MISC
  http://www.zerodayinitiative.com/advisories/ZDI-07-060.html

HP
  http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c01205079

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/483106/100/100/threaded


Return to the previous page.