Vulnerabilities > CVE-2007-4226 - Remote Privilege Escalation vulnerability in Bluecat Networks Adonis 5.0.2.8

047910
CVSS 7.1 - HIGH
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
SINGLE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
high complexity
bluecat-networks
exploit available
NVD
Published: 2007-08-08
Updated: 2018-10-15

Summary

Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP appliance 5.0.2.8) allows remote authenticated administrators, with certain TFTP privileges, to create and overwrite arbitrary files via a .. (dot dot) in a pathname. NOTE: this can be leveraged for administrative access by overwriting /etc/shadow.

Vulnerable Configurations

Part Description Count
Hardware
Bluecat_Networks
1

Exploit-Db

descriptionBlueCat Networks Adonis 5.0.2 .8 TFTP Remote Privilege Escalation Vulnerability. CVE-2007-4226. Remote exploit for linux platform
idEDB-ID:30454
last seen2016-02-03
modified2007-08-06
published2007-08-06
reporterdefaultroute
sourcehttps://www.exploit-db.com/download/30454/
titleBlueCat Networks Adonis 5.0.2.8 - TFTP Remote Privilege Escalation Vulnerability

References