CVE-2007-4067 Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary f...
HighCVSS 9.3
EPSS 7.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Absolute path traversal vulnerability in the clInetSuiteX6.clWebDav ActiveX control in CLINETSUITEX6.OCX in Clever Internet ActiveX Suite 6.2 allows remote attackers to create or overwrite arbitrary files via a full pathname in the second argument to the GetToFile method. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| clever components internet activex suite | <= 6.2 | No fix listed |
References
- 26213 third-party-advisory vendor-advisory
- 20070730 Remote File Inclusion: it's not just for PHP anymore exploit mailing-list patch
- 25063 exploit vdb-entry
- ADV-2007-2659 vdb-entry
- cleverinternet-gettofile-file-overwrite(35590) vdb-entry
- 4226 exploit