PT-2007-4081 · Openldap · Openldap+2

Publicado 2007-05-21 · Atualizado 2017-07-29 · CVE-2007-2767

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OPeNDAP 4 (Hydrax) versions prior to 1.2.1 BES versions prior to 3.5.0

Description The issue allows remote attackers to list filesystem contents and obtain sensitive information. The exact vectors used for the attack are not specified.

Recommendations For OPeNDAP 4 (Hydrax) versions prior to 1.2.1, update to version 1.2.1 or later. For BES versions prior to 3.5.0, update to version 3.5.0 or later.

Correção

Identificadores relacionados

CVE-2007-2767

Produtos afetados

Bes

Hydrax

Openldap

Referências · 8

• http://secunia.com/advisories/25319 · Nota
• http://vupen.com/english/advisories/2007/1887 · Nota
• http://opendap.org/security.html · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2007-2767 · Nota de Segurança
• http://osvdb.org/35486 · Nota
• http://securityfocus.com/bid/24056 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34410 · Nota
• http://kb.cert.org/vuls/id/671028 · Correção