The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.
References
Link | Resource |
---|---|
http://secunia.com/advisories/26243 | Exploit Patch Vendor Advisory |
http://www.nessus.org/news/ | Patch |
http://www.securityfocus.com/bid/25088 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/35641 |
Configurations
History
No history.
Information
Published : 2007-07-30 17:30
Updated : 2024-02-04 17:13
NVD link : CVE-2007-4062
Mitre link : CVE-2007-4062
CVE.ORG link : CVE-2007-4062
JSON object : View
Products Affected
nessus
- vulnerability_scanner
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')