CVE-2007-2747: Medium severity rdiffWeb rdiffWeb vulnerability
Published May 17, 2007
·Updated
Directory traversal vulnerability in rdwhelpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.
Affected Software
6 affected components
rdiffWeb rdiffWeb=0.2
rdiffWeb rdiffWeb<=0.3.5
rdiffWeb rdiffWeb=0.3.2
rdiffWeb rdiffWeb=0.3
rdiffWeb rdiffWeb=0.3.1
rdiffWeb rdiffWeb=0.1
Remediation
Event History
May 17, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-2747?
CVE-2007-2747 has a medium severity level due to its potential to allow unauthorized file access.
2
How do I fix CVE-2007-2747?
To fix CVE-2007-2747, upgrade to rdiffWeb version 0.3.5.1 or later.
3
What types of systems are affected by CVE-2007-2747?
CVE-2007-2747 affects rdiffWeb versions prior to 0.3.5.1, including version 0.2 and all versions up to 0.3.5.
4
What attack vector is exploited in CVE-2007-2747?
CVE-2007-2747 is exploited through directory traversal, allowing attackers to read arbitrary files.
5
Who can be impacted by CVE-2007-2747?
Users running vulnerable versions of rdiffWeb can be impacted by CVE-2007-2747, exposing sensitive information.