PT-2007-4081 · Openldap · Openldap+2

Published 2007-05-21 · Updated 2017-07-29 · CVE-2007-2767

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions OPeNDAP 4 (Hydrax) versions prior to 1.2.1 BES versions prior to 3.5.0

Description The issue allows remote attackers to list filesystem contents and obtain sensitive information. The exact vectors used for the attack are not specified.

Recommendations For OPeNDAP 4 (Hydrax) versions prior to 1.2.1, update to version 1.2.1 or later. For BES versions prior to 3.5.0, update to version 3.5.0 or later.

Fix

Related Identifiers

CVE-2007-2767

Affected Products

Bes

Hydrax

Openldap

References · 8

• http://opendap.org/security.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2767 · Security Note
• http://securityfocus.com/bid/24056 · Patch
• http://kb.cert.org/vuls/id/671028 · Patch
• http://secunia.com/advisories/25319 · Note
• http://vupen.com/english/advisories/2007/1887 · Note
• http://osvdb.org/35486 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34410 · Note