Vulnerabilities > CVE-2007-4067 - Unspecified vulnerability in Clever Components Internet Activex Suite
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN clever-components
exploit available
Summary
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Clever Internet ActiveX Suite 6.2 Arbitrary File Download/Overwrite. CVE-2007-4067. Remote exploit for windows platform |
| file | exploits/windows/remote/4226.html |
| id | EDB-ID:4226 |
| last seen | 2016-01-31 |
| modified | 2007-07-25 |
| platform | windows |
| port | |
| published | 2007-07-25 |
| reporter | shinnai |
| source | https://www.exploit-db.com/download/4226/ |
| title | Clever Internet ActiveX Suite 6.2 - Arbitrary File Download/Overwrite |
| type | remote |
References
- http://secunia.com/advisories/26213
- http://secunia.com/advisories/26213
- http://www.attrition.org/pipermail/vim/2007-July/001729.html
- http://www.attrition.org/pipermail/vim/2007-July/001729.html
- http://www.securityfocus.com/bid/25063
- http://www.securityfocus.com/bid/25063
- http://www.vupen.com/english/advisories/2007/2659
- http://www.vupen.com/english/advisories/2007/2659
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35590
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35590
- https://www.exploit-db.com/exploits/4226
- https://www.exploit-db.com/exploits/4226