{ "schema_version": "1.4.0", "id": "GHSA-hcc5-4c4w-p9qg", "modified": "2022-05-02T03:37:18Z", "published": "2022-05-02T03:37:18Z", "aliases": [ "CVE-2009-2658" ], "details": "Directory traversal vulnerability in ZNC before 0.072 allows remote attackers to overwrite arbitrary files via a crafted DCC SEND request.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2658" }, { "type": "WEB", "url": "https://www.redhat.com/archives/fedora-package-announce/2009-July/msg00965.html" }, { "type": "WEB", "url": "http://en.znc.in/w/index.php?title=ZNC&oldid=3209#WARNING" }, { "type": "WEB", "url": "http://en.znc.in/wiki/ChangeLog/0.072" }, { "type": "WEB", "url": "http://secunia.com/advisories/35916" }, { "type": "WEB", "url": "http://www.debian.org/security/2009/dsa-1848" }, { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2009/07/21/5" }, { "type": "WEB", "url": "http://znc.svn.sourceforge.net/viewvc/znc?view=rev&sortby=rev&sortdir=down&revision=1570" } ], "database_specific": { "cwe_ids": [ "CWE-22" ], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-08-04T16:30:00Z" } }