PT-2007-2119 · Ipswitch · Ipswitch Ws Ftp

Publicado 2007-02-02 · Atualizado 2018-10-16 · CVE-2007-0665

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipswitch WS FTP 2007 Professional

Description A format string issue in the SCP module of Ipswitch WS FTP 2007 Professional may allow remote attackers to execute arbitrary commands by including format string specifiers in the filename, particularly when using the SHELL WS FTP script command.

Recommendations For Ipswitch WS FTP 2007 Professional, consider disabling the SCP module or restricting its use until a fix is available to prevent potential exploitation.

Correção

Identificadores relacionados

CVE-2007-0665

Produtos afetados

Ipswitch Ws Ftp

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/31865 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0665 · Nota de Segurança
• http://osvdb.org/33602 · Nota
• http://securityfocus.com/bid/22275 · Aviso do Fabricante
• http://securityfocus.com/archive/1/458293/100/0/threaded · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0665 · Nota