Home > Vulnerability Database > CVE-2007-5742

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2007-5742

Date: November 30, 2007

Directory traversal vulnerability in the WML engine preprocessor for Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows remote attackers to read arbitrary files via ".." sequences in unknown vectors.

Severity Score

8.6

Related Resources (16)

Url: http://www.wesnoth.org/forum/viewtopic.php?t=18844

Url: http://www.securityfocus.com/bid/26626

Url: https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00006.html

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/38752

Url: https://people.canonical.com/~ubuntu-security/cve/CVE-2007-5742

Url: http://www.debian.org/security/2007/dsa-1421

Url: http://www.vupen.com/english/advisories/2007/4026

Url: http://www.wesnoth.org/forum/viewtopic.php?p=264289#264289

Url: http://osvdb.org/41713

Url: https://nvd.nist.gov/vuln/detail/CVE-2007-5742

Url: http://sourceforge.net/project/shownotes.php?release_id=557098

Url: https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00004.html

Url: http://secunia.com/advisories/27943

Url: http://secunia.com/advisories/27920

Url: http://secunia.com/advisories/27786

Url: https://www.mend.io/vulnerability-database/CVE-2007-5742

Severity Score

8.6

Weakness Type (CWE)

Path Traversal

CWE-22

CVSS v3.1

Base Score:	8.6
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	LOW
Integrity (I):	LOW
Availability (A):	HIGH

CVSS v2

Base Score:	9.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	PARTIAL
Availability (A):	COMPLETE
Additional information:

Do you need more information?

Contact Us