ByteOS Network

NVD Vulnerability Details :

CVE-2007-3692

Modified

Source-cve@mitre.org

Published At-11 Jul, 2007 | 17:30

Updated At-29 Jul, 2017 | 01:32

Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a .. (dot dot) in the name parameter.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.8	HIGH	AV:N/AC:L/Au:N/C:C/I:N/A:N

CPE Matches

kddi>>ezfactory_download_cgi>>1.0

cpe:2.3:a:kddi:ezfactory_download_cgi:1.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
http://jvn.jp/jp/JVN%2333593387/index.html	cve@mitre.org	N/A
http://osvdb.org/38453	cve@mitre.org	N/A
http://securitytracker.com/id?1018344	cve@mitre.org	Patch
http://www.au.kddi.com/ezfactory/tec/dlcgi/info.html	cve@mitre.org	N/A
http://www.vupen.com/english/advisories/2007/2472	cve@mitre.org	N/A
https://exchange.xforce.ibmcloud.com/vulnerabilities/35323	cve@mitre.org	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History