CVEvulnerability
CVE-2007-6317
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-22
Description
Multiple directory traversal vulnerabilities in BarracudaDrive Web Server before 3.8 allow (1) remote attackers to read arbitrary files via certain ..\ (dot dot backslash) sequences in the URL path, or (2) remote authenticated users to delete arbitrary files or create arbitrary directories via a ..\ (dot dot backslash) sequence in the dir parameter to /drive/c/bdusers/USER/.
Affected configurations
• real time logic barracudadrive web server 3.7.2
• real time logic barracudadrive web server home server 3.7.2
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://aluigi.altervista.org/adv/barradrive-adv.txt Exploit
- http://secunia.com/advisories/28032 Vendor Advisory
- http://securityreason.com/securityalert/3434 securityreason.com
- http://www.securityfocus.com/archive/1/484833/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26805 Exploit, Patch
- http://aluigi.altervista.org/adv/barradrive-adv.txt Exploit
- http://secunia.com/advisories/28032 Vendor Advisory
- http://securityreason.com/securityalert/3434 securityreason.com
- http://www.securityfocus.com/archive/1/484833/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26805 Exploit, Patch