PT-2007-3905 · Cisco · Cisco Ios

Published 2007-05-09 · Updated 2023-05-09 · CVE-2007-2586

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Cisco IOS versions 11.3 through 12.4

Description The issue allows remote attackers to execute arbitrary code and have other impacts, including reading the startup-config. This can be achieved by sending a crafted MKD command that involves access to a VTY device and overflows a buffer. The vulnerability can also result in a denial of service condition, improper verification of user credentials, and the ability to retrieve or write any file from the device filesystem, including the device's saved configuration, which may include passwords or other sensitive information.

Recommendations For Cisco IOS versions 11.3 through 12.4, consider disabling the FTP Server feature as a temporary workaround until a patch is available. Restrict access to the VTY device to minimize the risk of exploitation. Avoid using the MKD command in the FTP Server until the issue is resolved.

Exploit

Fix

RCE

DoS

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2007-2586

Affected Products

Cisco Ios

References · 14

• 🔥 http://exploit-db.com/exploits/6155 · Exploit
• 🔥 https://exploit-db.com/exploits/6155 · Exploit
• 🔥 http://securityfocus.com/bid/23885 · Exploit
• http://cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml · Vendor Advisory
• https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20070509-iosftp · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2586 · Security Note
• http://securitytracker.com/id?1018030 · Note
• http://vupen.com/english/advisories/2007/1749 · Note
• http://seclists.org/bugtraq/2009/Jan/0183.html · Note
• http://secunia.com/advisories/25199 · Note
• http://osvdb.org/35334 · Note
• http://securityfocus.com/archive/1/494868 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5036 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34197 · Note