CVEvulnerability
CVE-2007-4583
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-08-29
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-22
Description
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.
Affected configurations
• acti network video recorder sp2 2.0
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://osvdb.org/38386 osvdb.org
- http://osvdb.org/38387 osvdb.org
- http://secunia.com/advisories/26622 secunia.com
- http://www.securityfocus.com/bid/25465 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2993 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36303 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36304 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4323 www.exploit-db.com
- https://www.exploit-db.com/exploits/4324 www.exploit-db.com
- http://osvdb.org/38386 osvdb.org
- http://osvdb.org/38387 osvdb.org
- http://secunia.com/advisories/26622 secunia.com
- http://www.securityfocus.com/bid/25465 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/2993 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36303 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36304 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/4323 www.exploit-db.com
- https://www.exploit-db.com/exploits/4324 www.exploit-db.com