PT-2007-2948 · Kde+1 · Konqueror+1

Publicado

2007-03-21

·

Atualizado

2017-10-11

·

CVE-2007-1564

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Konqueror version 3.5.5
Description The issue concerns the FTP protocol implementation, which allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information. This is achieved by specifying an alternate server address in an FTP PASV response.
Recommendations For Konqueror version 3.5.5, consider disabling the FTP protocol implementation until a patch is available. Restrict access to sensitive information and avoid using the FTP protocol with untrusted servers to minimize the risk of exploitation.

Exploit

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2007-1564
RHSA-2007:0909
RHSA-2007_0909

Produtos afetados

Konqueror
Red Hat