CVE-2007-5819

Published: Nov 5, 2007Modified: Apr 23, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

IBM Tivoli Continuous Data Protection for Files (CDP) 3.1.0 uses weak permissions (unrestricted write) for the Central Admin Global download directory, which allows local users to place arbitrary files into a location used for updating CDP clients.

Affected (1)

Products: Ibm: Tivoli Continuous Data Protection For Files

Ibm

1 product

Tivoli Continuous Data Protection For Files

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Continuous Data Protection For Files	Version 3.1.0

Related CWEs

CWE-264

References (10)

http://secunia.com/advisories/27473

Source: cve@mitre.org

Vendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg1IC54264

Source: cve@mitre.org

http://www.securityfocus.com/bid/26293

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/3683

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/38215

Source: cve@mitre.org

http://secunia.com/advisories/27473