CVE-2007-4031

EPSS 5.7%

Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/4237unverified cve_referencewww.exploit-db.com/exploits/4230unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/26243 http://securitytracker.com/id?1018469 https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 https://www.exploit-db.com/exploits/4230 http://www.nessus.org/news/http://www.securityfocus.com/bid/25088 http://www.vupen.com/english/advisories/2007/2680