CVE-2007-2747

Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.
Configurations

Configuration 1

cpe:2.3:a:rdiffweb:rdiffweb:0.2:*:*:*:*:*:*:*
cpe:2.3:a:rdiffweb:rdiffweb:*:*:*:*:*:*:*:*
cpe:2.3:a:rdiffweb:rdiffweb:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:rdiffweb:rdiffweb:0.3:*:*:*:*:*:*:*
cpe:2.3:a:rdiffweb:rdiffweb:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:rdiffweb:rdiffweb:0.1:*:*:*:*:*:*:*

Information

Published : 2007-05-17 08:30

Updated : 2017-07-29 01:31


NVD link : CVE-2007-2747

Mitre link : CVE-2007-2747

Products Affected
No products.