CVE-2007-2769

N/A

Description

BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

CVE Details

CVSS v3.1 ScoreN/A

Published5/21/2007

Last Modified4/9/2025

Sourcenvd

Honeypot Sightings0

Affected Products

opendap:besopendap:hyrax

References

http://osvdb.org/35487(cve@mitre.org)

http://secunia.com/advisories/25319(cve@mitre.org)

http://www.kb.cert.org/vuls/id/659148(cve@mitre.org)

http://www.opendap.org/security.html(cve@mitre.org)

http://www.securityfocus.com/bid/24055(cve@mitre.org)

http://www.vupen.com/english/advisories/2007/1887(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34408(cve@mitre.org)

http://osvdb.org/35487(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/25319(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/659148(af854a3a-2127-422b-91ae-364da2661108)

http://www.opendap.org/security.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/24055(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/1887(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34408(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.