CVE-2007-4031
Nessus Vulnerability Scanner <3.0.6 - Path Traversal
Title source: llmDescription
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.
Exploits (2)
References (7)
Scores
EPSS
0.0752
EPSS Percentile
91.7%
Classification
CWE
CWE-22
Status
draft
Affected Products (1)
nessus/vulnerability_scanner
Timeline
Published
Jul 27, 2007
Tracked Since
Feb 18, 2026