Lucene search
HistoryFeb 02, 2007 - 9:28 p.m.
CVE-2007-0665
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.021
Percentile
89.2%
Format string vulnerability in the SCP module in Ipswitch WS_FTP 2007 Professional might allow remote attackers to execute arbitrary commands via format string specifiers in the filename, related to the SHELL WS_FTP script command.
Affected configurations
Node
ipswitchws_ftp_proMatch2007
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ipswitch | ws_ftp_pro | 2007 | cpe:2.3:a:ipswitch:ws_ftp_pro:2007:*:*:*:*:*:*:* |
Related
prion
prion
Format string
2007-02-02 21:28:00
cvelist
cvelist
CVE-2007-0665
2007-02-02 21:00:00
securityvulns
securityvulns
IPSwitch WS_FTP unfilterd shell characters security vulnerability
2007-01-28 00:00:00
cve
cve
CVE-2007-0665
2007-02-02 21:28:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
7.6
Confidence
High
EPSS
0.021
Percentile
89.2%
Related for NVD:CVE-2007-0665