2349Third-party advisory
http://securityreason.com/securityalert/2349 CVE-2007-1303
RRDBrowse 1.6 - Arbitrary File Disclosure
Record summary
CVE-2007-1303 has a selected CVSS score of 7.8; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in rb.cgi in RRDBrowse 1.6 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBRRDBrowse 1.6 - Arbitrary File DisclosureExploitDB exploitby Sebastian WolfgartenNot analyzed1 file
References
8devtarget.org
http://www.devtarget.org/rrdbrowse-advisory-03-2007.txt rrdbrowse.orgConfirmation
http://www.rrdbrowse.org/index.php 20070304 Arbitrary file disclosure vulnerability in rrdbrowse <= 1.6mailing list
http://www.securityfocus.com/archive/1/461911/100/0/threaded 22817vdb entry
http://www.securityfocus.com/bid/22817 ADV-2007-0834vdb entry
http://www.vupen.com/english/advisories/2007/0834 rrdbrowse-file-directory-traversal(32793)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/32793 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2007-1303