PT-2007-4083 · Openldap · Openldap+2

Published 2007-05-21 · Updated 2017-07-29 · CVE-2007-2769

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions OPeNDAP 4 (Hydrax) versions prior to 1.2.1 BES versions prior to 3.5.0

Description The issue arises from improper handling of compressed files, allowing remote attackers to upload arbitrary files or execute arbitrary commands via a crafted compressed file.

Recommendations For OPeNDAP 4 (Hydrax) versions prior to 1.2.1, update to version 1.2.1 or later to resolve the issue. For BES versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-2769

Affected Products

Bes

Hydrax

Openldap

References · 8

• http://opendap.org/security.html · Patch
• http://kb.cert.org/vuls/id/659148 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-2769 · Security Note
• http://securityfocus.com/bid/24055 · Patch
• http://secunia.com/advisories/25319 · Note
• http://vupen.com/english/advisories/2007/1887 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34408 · Note
• http://osvdb.org/35487 · Note