CVE-2007-4031

Nessus Vulnerability Scanner <3.0.6 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.

Exploits (2)

exploitdb WORKING POC VERIFIED
by h07 · htmlremotewindows
https://www.exploit-db.com/exploits/4230
exploitdb WORKING POC
htmlremotewindows
https://www.exploit-db.com/exploits/4237

Scores

EPSS 0.0752
EPSS Percentile 91.7%

Classification

CWE
CWE-22
Status draft

Affected Products (1)

nessus/vulnerability_scanner

Timeline

Published Jul 27, 2007
Tracked Since Feb 18, 2026