CVE-2007-4226

EPSS 3.8%

Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8) allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. (dot dot) in a pathname. NOTE: this can be leveraged for administrative access by overwriting /etc/shadow.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/30454unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://marc.info/?l=bugtraq&m=118669433531027&w=2 http://osvdb.org/39397 http://secunia.com/advisories/26354 http://securityreason.com/securityalert/2986 http://securitytracker.com/id?1018521 https://exchange.xforce.ibmcloud.com/vulnerabilities/35807 http://www.securityfocus.com/archive/1/475667/100/0/threaded http://www.securityfocus.com/bid/25214 http://www.vupen.com/english/advisories/2007/2840