« Volver al listado

CVE-2007-2975

Estado: ModificadaAlta (7.5)—

The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Ignite Realtime — Openfire

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-2975",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-06-01T01:30:00.000",
  "references": [
    {
      "url": "http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/25427",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.igniterealtime.org/issues/browse/JM-1049",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/36713",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/24205",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://blogs.reucon.com/srt/2007/05/11/openfire_3_3_1_fixes_critical_security_issue.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/25427",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.igniterealtime.org/issues/browse/JM-1049",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/36713",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/24205",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The admin console in Ignite Realtime Openfire 3.3.0 and earlier (formerly Wildfire) does not properly specify a filter mapping in web.xml, which allows remote attackers to gain privileges and execute arbitrary code by accessing functionality that is exposed through DWR, as demonstrated using the downloader."
    },
    {
      "lang": "es",
      "value": "La consola de administración de Ignite Realtime Openfire versiones 3.3.0 y anteriores (anteriormente Wildfire), no especifica apropiadamente una asignación de filtros en el archivo web.xml, lo que permite a atacantes remotos alcanzar privilegios y ejecutar código arbitrario mediante el acceso a la funcionalidad que se expone por medio de DWR, como es demostrado usando el descargador."
    }
  ],
  "lastModified": "2026-06-16T22:40:48.943",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "294D3DFC-F211-4403-8C4E-B90134D01F2B",
              "versionEndIncluding": "3.3.0"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:2.6.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "530BD930-529B-48C1-B3F1-D968115DCEE0"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:2.6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A20BA3D1-F270-4EDB-B60C-ED97C66C46BC"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:2.6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E452066F-34AA-4033-AD8D-87BC78949B8E"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DAB2A5E5-335C-4FBE-B902-D7F9AFF705B8"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EBF9C7B5-9374-4256-B4CC-B04E1B51B03D"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1D731C51-8D5B-4C71-9B76-88969AB7D8A9"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7F917329-ECCD-42AC-9E41-ABB80547DA7F"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "26A2A594-39D1-4788-95D1-217D81811529"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.2.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F33BBDFE-FF0F-4FE2-911D-B200453929A1"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.2.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0588EA6E-CD30-43F7-98F4-7C592D7639D8"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.2.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "36AE42C7-B84A-421A-BBFC-7A20D69FCD83"
            },
            {
              "criteria": "cpe:2.3:a:ignite_realtime:openfire:3.2.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DD9C7C90-9DE7-484C-AF90-E9A97DBFC1D5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "evaluatorSolution": "The vendor has addressed this issue through the release of the following product updates:\r\n\r\nIgnite Realtime openfire-3.3.1-1.i386.rpm\r\nhttp://www.igniterealtime.org/downloads/download-landing.jsp?file=open fire/openfire-3.3.1-1.i386.rpm\r\n\r\nIgnite Realtime openfire_3_3_1.dmg\r\nhttp://www.igniterealtime.org/downloads/download-landing.jsp?file=open fire/openfire_3_3_1.dmg\r\n\r\nIgnite Realtime openfire_3_3_1.exe\r\nhttp://www.igniterealtime.org/downloads/download-landing.jsp?file=open fire/openfire_3_3_1.exe"
}