BadBlue Web server multiple security vulnerabilities updated since 13.12.2007
Published:		25.04.2008
Source:		BUGTRAQ
SecurityVulns ID:		8443
Type:		remote
Level:		6/10
Description:		Buffer overflow, directory traversal, information leak, DoS.

Affected:		BADBLUE : BadBlue 2.72
CVE:		CVE-2007-6378 (Directory traversal vulnerability in upload.dll in BadBlue 2.72b and earlier allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the filename parameter.)

Original document		VulnerabilityResearch_(at)_digitaldefense.net, DDIVRT-2008-11 BadBlue uninst.exe DoS (25.04.2008)
		Luigi Auriemma, Multiple vulnerabilities in BadBlue 2.72b (13.12.2007)

Discuss:

Read or add your comments to this news (0 comments)