Unscored severity · published Nov 26, 2007
CVE-2007-6130
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions
–
CVSS
1.5%
EPSS
No
On KEV
Description
gnump3d 2.9final does not apply password protection to its plugins, which might allow remote attackers to bypass intended access restrictions.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.5% · higher than 74% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
GN
Gnump3d · Gnu
2.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-6130
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-6130
secunia.com
http://secunia.com/advisories/27848
secunia.com
http://secunia.com/advisories/27965
www.gnu.org
http://www.gnu.org/software/gnump3d/ChangeLog
www.novell.com
http://www.novell.com/linux/security/advisories/2007_25_sr.html
www.securityfocus.com
http://www.securityfocus.com/bid/26618
www.vupen.com
http://www.vupen.com/english/advisories/2007/4039
More from Gnump3d
7.8
CVE-2019-3697
UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of gnump3d in openSUSE Leap 15.1 allows local attackers to escalate from user gnump3d to root
–
CVE-2005-3349
GNU Gnump3d before 2.9.8 allows local users to modify or delete arbitrary files via a symlink attack on the index.lok temporary file
–
CVE-2005-3355
Directory traversal vulnerability in GNU Gnump3d before 2.9.8 has unknown impact via "CGI parameters, and cookie values"
–
CVE-2005-3424
Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.5 allows remote attackers to inject arbitrary web script or HTML via 404 error pages, a different vulnerability than…
–
CVE-2005-3425
Cross-site scripting (XSS) vulnerability in GNUMP3D before 2.9.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability…