CVE-2007-4583 Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create....
MediumCVSS 5.0
EPSS 8.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple absolute path traversal vulnerabilities in the nvUtility.Utility.1 ActiveX control in nvUtility.dll 1.0.14.0 in ACTi Network Video Recorder (NVR) SP2 2.0 allow remote attackers to (1) create or overwrite arbitrary files via a full pathname in the first argument to the SaveXMLFile method or (2) delete arbitrary files via a full pathname in the argument to the DeleteXMLFile method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acti network video recorder | = sp2_2.0 | No fix listed |
References
- 38386 vdb-entry
- 38387 vdb-entry
- 26622 third-party-advisory
- 25465 vdb-entry
- ADV-2007-2993 vdb-entry
- actinvr-deletexmlfile-file-overwrite(36303) vdb-entry
- actinvr-savexmlfile-file-overwrite(36304) vdb-entry
- 4323 exploit
- 4324 exploit