CVE-2007-3502 - Vulnerability Details - OpenCVE

Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Kaspersky Lab	Kaspersky Anti-spam

Configuration 1 [-]

cpe:2.3:a:kaspersky_lab:kaspersky_anti-spam:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://osvdb.org/37217
http://secunia.com/advisories/25857
http://www.kaspersky.com/technews?id=203038700
http://www.securityfocus.com/bid/24692
http://www.securitytracker.com/id?1018324
http://www.vupen.com/english/advisories/2007/2382
https://exchange.xforce.ibmcloud.com/vulnerabilities/35130

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-06-30T01:00:00

Updated: 2024-08-07T14:21:35.419Z

Reserved: 2007-06-29T00:00:00

Link: CVE-2007-3502

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2007-06-30T01:30:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2007-3502

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-06-28T00:00:00", "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "ADV-2007-2382", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/2382"}, {"name": "24692", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/24692"}, {"name": "25857", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/25857"}, {"name": "37217", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/37217"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://www.kaspersky.com/technews?id=203038700"}, {"name": "1018324", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1018324"}, {"name": "kaspersky-antispam-security-bypass(35130)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35130"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-3502", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "ADV-2007-2382", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/2382"}, {"name": "24692", "refsource": "BID", "url": "http://www.securityfocus.com/bid/24692"}, {"name": "25857", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/25857"}, {"name": "37217", "refsource": "OSVDB", "url": "http://osvdb.org/37217"}, {"name": "http://www.kaspersky.com/technews?id=203038700", "refsource": "CONFIRM", "url": "http://www.kaspersky.com/technews?id=203038700"}, {"name": "1018324", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1018324"}, {"name": "kaspersky-antispam-security-bypass(35130)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35130"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T14:21:35.419Z"}, "title": "CVE Program Container", "references": [{"name": "ADV-2007-2382", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/2382"}, {"name": "24692", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/24692"}, {"name": "25857", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/25857"}, {"name": "37217", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/37217"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://www.kaspersky.com/technews?id=203038700"}, {"name": "1018324", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1018324"}, {"name": "kaspersky-antispam-security-bypass(35130)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35130"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-3502", "datePublished": "2007-06-30T01:00:00", "dateReserved": "2007-06-29T00:00:00", "dateUpdated": "2024-08-07T14:21:35.419Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kaspersky_lab:kaspersky_anti-spam:*:*:*:*:*:*:*:*", "matchCriteriaId": "2E3B4B57-619B-405B-9B0B-020970AAD305", "versionEndIncluding": "3.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the web-based product configuration system in Kaspersky Anti-Spam before 3.0 MP1 allows remote attackers to obtain access to certain directories."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el sistema de configuraci\u00f3n de producto basado en web de Kaspersky Anti-Spam anterior a 3.0 MP1 permite a atacantes remotos obtener acceso a determinados directorios."}], "id": "CVE-2007-3502", "lastModified": "2025-04-09T00:30:58.490", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-06-30T01:30:00.000", "references": [{"source": "cve@mitre.org", "url": "http://osvdb.org/37217"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25857"}, {"source": "cve@mitre.org", "tags": ["Patch"], "url": "http://www.kaspersky.com/technews?id=203038700"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/24692"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1018324"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/2382"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35130"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/37217"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://secunia.com/advisories/25857"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch"], "url": "http://www.kaspersky.com/technews?id=203038700"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/24692"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1018324"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2007/2382"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/35130"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}