Approved changes feed: RSS · Atom

cpe:2.3:a:nessus:vulnerability_scanner:3.0.6:*:*:*:*:*:*:*

part: a version: 3.0.6 update: *

VendorNessus (2a03b884-7a18-5eb3-852e-fb73e10aac44)
ProductVulnerability Scanner (b8cbfbf6-f99c-5764-afbe-d00222367e37)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-4062 vulnerable 2026-06-08 04:49:55.619881 Details available
The SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via unspecified vectors involving the deleteNessusRC method, probably a directory traversal vulnerability.
Published: 2007-07-30T17:00:00.000Z
Updated: 2024-08-07T14:37:06.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4061 vulnerable 2026-06-08 04:49:55.619561 Details available
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in the argument to the saveNessusRC method, which writes text specified by the addsetConfig method, possibly related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Published: 2007-07-30T17:00:00.000Z
Updated: 2024-08-07T14:37:06.283Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4031 vulnerable 2026-06-08 04:49:55.575796 Details available
Directory traversal vulnerability in a certain ActiveX control in Nessus Vulnerability Scanner 3.0.6 allows remote attackers to delete arbitrary files via a .. (dot dot) in the argument to the deleteReport method, probably related to the SCANCTRL.ScanCtrlCtrl.1 ActiveX control in scan.dll.
Published: 2007-07-27T22:00:00.000Z
Updated: 2024-08-07T14:37:06.091Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.