PT-2007-2948 · Kde+1 · Konqueror+1

Published 2007-03-21 · Updated 2017-10-11 · CVE-2007-1564

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Konqueror version 3.5.5

Description The issue concerns the FTP protocol implementation, which allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information. This is achieved by specifying an alternate server address in an FTP PASV response.

Recommendations For Konqueror version 3.5.5, consider disabling the FTP protocol implementation until a patch is available. Restrict access to sensitive information and avoid using the FTP protocol with untrusted servers to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2007-1564

RHSA-2007:0909

RHSA-2007_0909

Affected Products

Konqueror

Red Hat

References · 35

• 🔥 https://exploit-db.com/exploits/29770 · Exploit
• http://novell.com/linux/security/advisories/2007_6_sr.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-02906 · Security Note
• http://vupen.com/english/advisories/2007/1076 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06493 · Security Note
• https://bdu.fstec.ru/vul/2015-06486 · Security Note
• http://secunia.com/advisories/27108 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06492 · Security Note
• https://bdu.fstec.ru/vul/2015-06488 · Security Note
• http://mandriva.com/security/advisories?name=MDKSA-2007:072 · Vendor Advisory
• http://ubuntu.com/usn/usn-447-1 · Vendor Advisory
• http://secunia.com/advisories/24889 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06491 · Security Note
• http://redhat.com/support/errata/RHSA-2007-0909.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-06487 · Security Note