CVE-2007-4226: Directory traversal vulnerability in the BlueCat Networks Proteus IPAM appliance 2.0.2.0 (Adonis DNS/DHCP a...

Security readout for executives and security teams

This is a legacy BlueCat appliance issue where an authenticated administrator with specific TFTP privileges could write files outside the intended directory. Because the record says this may overwrite sensitive authentication files, compromise could lead to administrative access on DNS/DHCP infrastructure. Exposure appears limited to organizations still operating the named legacy BlueCat Proteus IPAM or Adonis DNS/DHCP appliance versions, especially where administrative TFTP privileges exist or management access is broadly reachable. Prioritize if legacy BlueCat DNS/DHCP/IPAM appliances remain in production. The issue affects core network services and could enable administrative compromise, but evidence indicates a privileged-authenticated attack path rather than unauthenticated internet exploitation. Mitigation focus: Check BlueCat guidance for fixed firmware or supported migration options.; Remove unnecessary TFTP privileges from administrator accounts.; Restrict appliance management and TFTP access to trusted administrative networks..

Prepared

Jun 29, 2026, 04:07 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.