CVE-2007-4583
ACTi Network Video Recorder SP2 2.0 - Path Traversal and Arbitrary File Write via nvUtility.Utility.1 ActiveX Control
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2007-4583. PoCs published by shinnai.
AI-analyzed exploit summary This exploit targets a vulnerability in NVR SP2 2.0's nvUtility.Utility.1 ActiveX control, specifically the insecure SaveXMLFile() method. It allows arbitrary file write, demonstrated by creating a batch file on the target system.
Description
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.
Exploits (2)
This exploit targets a vulnerability in NVR SP2 2.0's nvUtility.Utility.1 ActiveX control, specifically the insecure SaveXMLFile() method. It allows arbitrary file write, demonstrated by creating a batch file on the target system.
This exploit targets an insecure method in the NVR SP2 2.0 nvUtility.Utility.1 ActiveX control (nvUtility.dll v. 1.0.14.0), allowing arbitrary file deletion via the 'DeleteXMLFile()' method. The PoC demonstrates file deletion on a vulnerable system using a simple HTML page with embedded VBScript.