Lucene search

MitreCVE-2007-4909

HistorySep 17, 2007 - 5:17 p.m.

CVE-2007-4909

2007-09-1717:17:00

CWE-264

mitre

web.nvd.nist.gov

cve-2007-4909

winscp

remote attackers

arbitrary file transfers

file-transfer commands

remote server

url

scp

sftp

ftp

incomplete fix

cve-2006-3015

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.1

Confidence

Low

EPSS

0.088

Percentile

94.6%

JSON

Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015.

Affected configurations

Nvd

Node

winscpwinscpMatch2.0.0

winscpwinscpMatch3.5.5_beta

winscpwinscpMatch3.5.6

winscpwinscpMatch3.6

winscpwinscpMatch3.6.1

winscpwinscpMatch3.6.5_beta

winscpwinscpMatch3.6.6

winscpwinscpMatch3.6.7

winscpwinscpMatch3.8.1

winscpwinscpMatch3.8.2

winscpwinscpMatch4.0.2

winscpwinscpMatch4.0.3

VendorProductVersionCPE
winscpwinscp2.0.0cpe:2.3:a:winscp:winscp:2.0.0:*:*:*:*:*:*:*
winscpwinscp3.5.5_betacpe:2.3:a:winscp:winscp:3.5.5_beta:*:*:*:*:*:*:*
winscpwinscp3.5.6cpe:2.3:a:winscp:winscp:3.5.6:*:*:*:*:*:*:*
winscpwinscp3.6cpe:2.3:a:winscp:winscp:3.6:*:*:*:*:*:*:*
winscpwinscp3.6.1cpe:2.3:a:winscp:winscp:3.6.1:*:*:*:*:*:*:*
winscpwinscp3.6.5_betacpe:2.3:a:winscp:winscp:3.6.5_beta:*:*:*:*:*:*:*
winscpwinscp3.6.6cpe:2.3:a:winscp:winscp:3.6.6:*:*:*:*:*:*:*
winscpwinscp3.6.7cpe:2.3:a:winscp:winscp:3.6.7:*:*:*:*:*:*:*
winscpwinscp3.8.1cpe:2.3:a:winscp:winscp:3.8.1:*:*:*:*:*:*:*
winscpwinscp3.8.2cpe:2.3:a:winscp:winscp:3.8.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
winscp	winscp	2.0.0	cpe:2.3:a:winscp:winscp:2.0.0:::::::*
winscp	winscp	3.5.5_beta	cpe:2.3:a:winscp:winscp:3.5.5_beta:::::::*
winscp	winscp	3.5.6	cpe:2.3:a:winscp:winscp:3.5.6:::::::*
winscp	winscp	3.6	cpe:2.3:a:winscp:winscp:3.6:::::::*
winscp	winscp	3.6.1	cpe:2.3:a:winscp:winscp:3.6.1:::::::*
winscp	winscp	3.6.5_beta	cpe:2.3:a:winscp:winscp:3.6.5_beta:::::::*
winscp	winscp	3.6.6	cpe:2.3:a:winscp:winscp:3.6.6:::::::*
winscp	winscp	3.6.7	cpe:2.3:a:winscp:winscp:3.6.7:::::::*
winscp	winscp	3.8.1	cpe:2.3:a:winscp:winscp:3.8.1:::::::*
winscp	winscp	3.8.2	cpe:2.3:a:winscp:winscp:3.8.2:::::::*