Vulnerabilities > CVE-2007-4226 - Unspecified vulnerability in Bluecat Networks Adonis 5.0.2.8

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
bluecat-networks
exploit available

Summary

Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8) allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. (dot dot) in a pathname. NOTE: this can be leveraged for administrative access by overwriting /etc/shadow.

Vulnerable Configurations

Part Description Count
Hardware
Bluecat_Networks
1

Exploit-Db

descriptionBlueCat Networks Adonis 5.0.2 .8 TFTP Remote Privilege Escalation Vulnerability. CVE-2007-4226. Remote exploit for linux platform
idEDB-ID:30454
last seen2016-02-03
modified2007-08-06
published2007-08-06
reporterdefaultroute
sourcehttps://www.exploit-db.com/download/30454/
titleBlueCat Networks Adonis 5.0.2.8 - TFTP Remote Privilege Escalation Vulnerability