CVE-2007-3266

Published: Jun 19, 2007Modified: Apr 23, 2026

9.0

Vector

AV:N/AC:L/Au:N/C:C/I:P/A:P

Exploitability: 10.0 / Impact: 8.5

Source: NVD

Description

Directory traversal vulnerability in webif.cgi in ifnet WEBIF allows remote attackers to include and execute arbitrary local files a .. (dot dot) in the outconfig parameter.

Affected (1)

Products: Ifnet: Webif.cgi

Ifnet

1 product

Webif.cgi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ifnet Webif.cgi	All versions

References (14)

http://osvdb.org/37508

Source: cve@mitre.org

http://secunia.com/advisories/25693

Source: cve@mitre.org

http://securityreason.com/securityalert/2816

Source: cve@mitre.org

http://www.mawk.org/mods.php?mods=Core&page=view&id=102

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/471647/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/24516

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/34921

Source: cve@mitre.org

http://osvdb.org/37508