Search criteria

1 vulnerability found for Download CGI Sample Program by KDDI

JVNDB-2007-000494

Vulnerability from jvndb - Published: 2008-05-21 00:00 - Updated:2008-05-21 00:00
Severity ?
() - -
Summary
KDDI sample CGI download program directory traversal vulnerability
Details
A directory traversal vulnerability exists in a sample CGI download program included with KDDI's EZFactory. A sample CGI download program is included with KDDI's EZFactory for downloading and saving data such as images and ringtones to EZweb compatible cellular phones. A directory traversal vulnerability exists in this program.
Impacted products
Show details on JVN DB website

{
  "@rdf:about": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000494.html",
  "dc:date": "2008-05-21T00:00+09:00",
  "dcterms:issued": "2008-05-21T00:00+09:00",
  "dcterms:modified": "2008-05-21T00:00+09:00",
  "description": "A directory traversal vulnerability exists in a sample CGI download program included with KDDI\u0027s EZFactory.\r\n\r\nA sample CGI download program is included with KDDI\u0027s EZFactory for downloading and saving data such as images and ringtones to EZweb compatible cellular phones. A directory traversal vulnerability exists in this program.",
  "link": "https://jvndb.jvn.jp/en/contents/2007/JVNDB-2007-000494.html",
  "sec:cpe": {
    "#text": "cpe:/a:kddi:download_cgi_sample_program",
    "@product": "Download CGI Sample Program",
    "@vendor": "KDDI",
    "@version": "2.2"
  },
  "sec:cvss": {
    "@score": "5.0",
    "@severity": "Medium",
    "@type": "Base",
    "@vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "@version": "2.0"
  },
  "sec:identifier": "JVNDB-2007-000494",
  "sec:references": [
    {
      "#text": "http://jvn.jp/en/jp/JVN33593387/index.html",
      "@id": "JVN#33593387",
      "@source": "JVN"
    },
    {
      "#text": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3692",
      "@id": "CVE-2007-3692",
      "@source": "CVE"
    },
    {
      "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2007-3692",
      "@id": "CVE-2007-3692",
      "@source": "NVD"
    },
    {
      "#text": "http://xforce.iss.net/xforce/xfdb/35323",
      "@id": "35323",
      "@source": "XF"
    },
    {
      "#text": "http://securitytracker.com/id?1018344",
      "@id": "1018344",
      "@source": "SECTRACK"
    },
    {
      "#text": "http://www.vupen.com/english/advisories/2007/2472",
      "@id": "VUPEN/ADV-2007-2472",
      "@source": "VUPEN"
    },
    {
      "#text": "http://osvdb.org/38453",
      "@id": "38453",
      "@source": "OSVDB"
    }
  ],
  "title": "KDDI sample CGI download program directory traversal vulnerability"
}