CVE-2007-0159

Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers…

published January 10, 2007

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers (possibly only update.maxmind.com) to overwrite arbitrary files via a .. (dot dot) in the database filename, which is returned by a request to app/update_getfilename.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02105 · 81.5th percentile
Published
2007-01-10T00:00Z
EPSS history
Timeline
  • 10 JAN 00:00Z
    Directory traversal vulnerability in the GeoIP_update_database_general function in libGeoIP/GeoIPUpdate.c in GeoIP 1.4.0 allows remote malicious update servers…
    cvelistv5