CVE-2007-0872

MEDIUM 5.0CVE-2007-0872 · Published 12/02/2007 · updated 16/06/2026

In short

CVE-2007-0872 is a MEDIUM (CVSS 5.0) vulnerability affecting plain old webserver (plain old webserver).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
plain old webserver plain_old_webserver	`= 0.0.7= 0.0.8`	No fix yet

Description

Directory traversal vulnerability in the Plain Old Webserver (POW) add-on before 0.0.9 for Mozilla Firefox allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

References

osvdb.org/33174
seclists.org/fulldisclosure/2007/Feb/0196.html · Exploit
seclists.org/fulldisclosure/2007/Feb/0210.html
secunia.com/advisories/24127
securityfocus.com/bid/22502
vupen.com/english/advisories/2007/0558
addons.mozilla.org/firefox/3002
exchange.xforce.ibmcloud.com/vulnerabilities/32467

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free