Security Advisory

CVE-2007-1406

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2007-03-10 22:00:00
Last updated 2024-09-16 23:47:02
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Trac before 0.10.3.1 does not send a Content-Disposition HTTP header specifying an attachment in certain "unsafe" situations, which has unknown impact and remote attack vectors.