PT-2007-5240 · Tenable Network Security+1 · Nessus Vulnerability Scanner+2

H07 + 1 · Publicado 2007-07-27 · Atualizado 2017-09-29 · CVE-2007-4031

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:C

Name of the Vulnerable Software and Affected Versions: Nessus Vulnerability Scanner version 3.0.6

Description: The issue allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. This is a directory traversal vulnerability in a certain ActiveX control.

Recommendations: For Nessus Vulnerability Scanner version 3.0.6, consider disabling the deleteReport method until a patch is available to prevent remote attackers from deleting arbitrary files. Restrict access to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll to minimize the risk of exploitation. Avoid using the .. (dot dot) sequence in the argument to the deleteReport method until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2007-4031

Produtos afetados

Nessus

Nessus Activex Control

Nessus Vulnerability Scanner

Referências · 10

• 🔥 https://exploit-db.com/exploits/4237 · Exploit
• 🔥 https://exploit-db.com/exploits/4230 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4031 · Nota de Segurança
• http://milw0rm.com/exploits/4230 · Nota
• http://securityfocus.com/bid/25088 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 · Nota
• http://securitytracker.com/id?1018469 · Nota
• http://nessus.org/news · Nota
• http://vupen.com/english/advisories/2007/2680 · Nota
• http://secunia.com/advisories/26243 · Aviso do Fabricante