OSVDB ID: 37469

Title: Hiki Session ID Traversal Arbitrary File Deletion

Info

Disclosure

Jun 26, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Input Manipulation
Disclosure: Vendor Verified

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

CVE ID: 2007-2836 (see also: NVD)
Bugtraq ID: 24603
Secunia Advisory ID: 25764 25874
ISS X-Force ID: 35029
VUPEN Advisory: ADV-2007-2304
Vendor Specific News/Changelog Entry: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=430691
http://hikiwiki.org/en/advisory20070624.html
http://hikiwiki.org/hiki-0_8_6.patch
Other Advisory URL: http://jvn.jp/jp/JVN%2305187780/index.html
http://www.debian.org/security/2007/dsa-1324

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/37469