CVE-2007-6317 | BDVDB-2026-28161 Detail

Description#

Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/484833/100/0/threaded
http://secunia.com/advisories/28032
http://aluigi.altervista.org/adv/barradrive-adv.txt
http://securityreason.com/securityalert/3434
http://www.securityfocus.com/bid/26805

Exploit#

No public exploit known

History#

Version 12007-12-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.