Vulnerabilities > CVE-2007-2747 - Directory Traversal vulnerability in rdiffWeb

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
rdiffweb
exploit available
NVD
Published: 2007-05-17
Updated: 2017-07-29

Summary

Directory traversal vulnerability in rdw_helpers.py in rdiffWeb before 0.3.5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the path parameter to the /browse URI.

Vulnerable Configurations

Part Description Count
Application
Rdiffweb
6

Exploit-Db

descriptionrdiffWeb 0.3.5 Directory Traversal Vulnerability. CVE-2007-2747 . Remote exploit for windows platform
idEDB-ID:30067
last seen2016-02-03
modified2007-05-22
published2007-05-22
reporterJesus Roncero
sourcehttps://www.exploit-db.com/download/30067/
titlerdiffweb 0.3.5 - Directory Traversal Vulnerability

References