CVE-2007-2769

N/A

Descricao

BES before 3.5.0 in OPeNDAP 4 (Hydrax) before 1.2.1 does not properly handle compressed files, which allows remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado5/21/2007

Ultima modificacao4/9/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

opendap:besopendap:hyrax

Referencias

http://osvdb.org/35487(cve@mitre.org)

http://secunia.com/advisories/25319(cve@mitre.org)

http://www.kb.cert.org/vuls/id/659148(cve@mitre.org)

http://www.opendap.org/security.html(cve@mitre.org)

http://www.securityfocus.com/bid/24055(cve@mitre.org)

http://www.vupen.com/english/advisories/2007/1887(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34408(cve@mitre.org)

http://osvdb.org/35487(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/25319(af854a3a-2127-422b-91ae-364da2661108)

http://www.kb.cert.org/vuls/id/659148(af854a3a-2127-422b-91ae-364da2661108)

http://www.opendap.org/security.html(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/24055(af854a3a-2127-422b-91ae-364da2661108)

http://www.vupen.com/english/advisories/2007/1887(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/34408(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.