5
CVE-2007-3702
- EPSS 7.51%
- Veröffentlicht 11.07.2007 23:30:00
- Zuletzt bearbeitet 16.06.2026 22:42:33
- Erkennungen
LoginDirectory traversal vulnerability in the load function in cgi-bin/mail/mailmachine.cgi in Mail Machine 3.989 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the archives parameter in a Load action.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mail Machine ≫ Mail Machine Version 3.980
Mail Machine ≫ Mail Machine Version 3.985
Mail Machine ≫ Mail Machine Version 3.987
Mail Machine ≫ Mail Machine Version 3.988
Mail Machine ≫ Mail Machine Version 3.989
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 7.51% | 0.937 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
http://osvdb.org/38452
http://secunia.com/advisories/26009
http://www.securityfocus.com/bid/24852
http://www.vupen.com/english/advisories/2007/2519
https://exchange.xforce.ibmcloud.com/vulnerabilities/35327
https://www.exploit-db.com/exploits/4171