PT-2007-4083 · Openldap · Openldap+2

Publicado 2007-05-21 · Atualizado 2017-07-29 · CVE-2007-2769

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OPeNDAP 4 (Hydrax) versions prior to 1.2.1 BES versions prior to 3.5.0

Description The issue arises from improper handling of compressed files, allowing remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

Recommendations For OPeNDAP 4 (Hydrax) versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. For BES versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-2769

Produtos afetados

Bes

Hydrax

Openldap

Referências · 8

• http://secunia.com/advisories/25319 · Nota
• http://vupen.com/english/advisories/2007/1887 · Nota
• http://opendap.org/security.html · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34408 · Nota
• http://kb.cert.org/vuls/id/659148 · Correção
• http://osvdb.org/35487 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2769 · Nota de Segurança
• http://securityfocus.com/bid/24055 · Correção