Информационная безопасность
[RU] switch to
English Version



CVECVE-2007-1564
СтатусCandidate
ОписаниеThe FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
ВажностьMedium
CVSS score5,6
CVSS vector(AV:R/AC:H/Au:NR/C:P/I:P/A:P/B:N)
PhaseAssigned (21.03.2007)
NVD:http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1564
ReferencesBID : 23091
 CONFIRM : http://www.kde.org/info/security/advisory-20070326...
 CONFIRM : https://issues.rpath.com/browse/RPL-1201
 FRSIRT : ADV-2007-1076
 MANDRIVA : MDKSA-2007:072
 MISC : http://bindshell.net/papers/ftppasv/ftp-client-pas...
 SECTRACK : 1017801
 SECUNIA : 24889
 SUSE : SUSE-SR:2007:006
 UBUNTU : USN-447-1
SecurityVulns:Атака FTP bounce против FTP-клиентов

О сайте | Условия использования
© SecurityVulns, 3APA3A, Владимир Дубровин
Нижний Новгород

 
 



Rating@Mail.ru
test server