CVE-2007-1406 — HIGH (10.0)

Vulnerability Description

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Affected Products

Vendor	Product	Versions
Edgewall Software	Trac	0.10

References

http://trac.edgewall.org/wiki/ChangeLog
http://trac.edgewall.org/wiki/ChangeLog

FAQ

What is CVE-2007-1406?

CVE-2007-1406 is a vulnerability with a CVSS score of 10.0 (HIGH). Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.

How severe is CVE-2007-1406?

CVE-2007-1406 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2007-1406?

Check the references section above for vendor advisories and patch information. Affected products include: Edgewall Software Trac.