CVE Vulnerability

CVE-2007-4583

Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.

5 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 10 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.securityfocus.com/bid/25465
http://secunia.com/advisories/26622
http://osvdb.org/38386
http://osvdb.org/38387
http://www.vupen.com/english/advisories/2007/2993
https://exchange.xforce.ibmcloud.com/vulnerabilities/36304
https://exchange.xforce.ibmcloud.com/vulnerabilities/36303
https://www.exploit-db.com/exploits/4324
https://www.exploit-db.com/exploits/4323
Configurations

Configuration 1

cpe:2.3:a:acti:network_video_recorder:sp2_2.0:*:*:*:*:*:*:*
Information

Published : 2007-08-29 01:17

Updated : 2017-09-29 01:29

NVD link : CVE-2007-4583

Mitre link : CVE-2007-4583

Products Affected
No products.
CWE
CWE-22