Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2007-1564
HistoryMar 21, 2007 - 7:19 p.m.

CVE-2007-1564

2007-03-2119:19:00
CWE-200
mitre
web.nvd.nist.gov
25
cve-2007-1564
ftp protocol
konqueror
remote servers
port scan
sensitive information
security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

Low

EPSS

0.023

Percentile

89.8%

JSON

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Affected configurations

Nvd
Node
kdekonquerorMatch3.5.5
VendorProductVersionCPE
kdekonqueror3.5.5cpe:2.3:a:kde:konqueror:3.5.5:*:*:*:*:*:*:*

Related

ubuntucve 1
veracode 1
nessus 9
cvelist 1
exploitdb 1
prion 1
openvas 7
nvd 1
ubuntu 1
securityvulns 1
redhat 1
centos 1
oraclelinux 1
ubuntucve
ubuntucve
CVE-2007-1564
2007-03-21 00:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:18:45
nessus
nessus
Mandrake Linux Security Advisory : kdelibs (MDKSA-2007:072)
2007-04-05 00:00:00
SuSE 10 Security Update : kdelibs3,kdelibs3-devel,CVE-2007-1564 (ZYPP Patch Number 3988)
2007-12-13 00:00:00
SuSE 10 Security Update : kdelibs3 (ZYPP Patch Number 3053)
2007-12-13 00:00:00
cvelist
cvelist
CVE-2007-1564
2007-03-21 19:00:00
exploitdb
exploitdb
KDE Konqueror 3.x/IOSlave - FTP PASV Port-Scanning
2007-03-21 00:00:00
prion
prion
Information disclosure
2007-03-21 19:19:00
openvas
openvas
Mandriva Update for kdelibs MDKSA-2007:072 (kdelibs)
2009-04-09 00:00:00
Mandriva Update for kdelibs MDKSA-2007:072 (kdelibs)
2009-04-09 00:00:00
SLES9: Security update for kdelibs3
2009-10-10 00:00:00
nvd
nvd
CVE-2007-1564
2007-03-21 19:19:00
ubuntu
ubuntu
KDE library vulnerabilities
2007-03-29 00:00:00
securityvulns
securityvulns
Multiple FTP clients FTP bounce attack
2009-01-05 00:00:00
redhat
redhat
(RHSA-2007:0909) Moderate: kdelibs security update
2007-10-08 00:00:00
centos
centos
kdelibs security update
2007-10-08 18:49:50
oraclelinux
oraclelinux
Moderate: kdelibs security update
2007-10-08 00:00:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.8

Confidence

Low

EPSS

0.023

Percentile

89.8%

JSON
Related for CVE-2007-1564
ubuntucve1veracode1nessus9cvelist1exploitdb1prion1openvas7nvd1ubuntu1securityvulns1redhat1centos1oraclelinux1