CVE-2007-2586

The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.

Link	Resource
http://www.cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml	Vendor Advisory
http://www.securityfocus.com/bid/23885	Exploit Third Party Advisory
http://www.securitytracker.com/id?1018030	Third Party Advisory VDB Entry
http://secunia.com/advisories/25199	Third Party Advisory
http://www.osvdb.org/35334	Broken Link
http://seclists.org/bugtraq/2009/Jan/0183.html	Mailing List Third Party Advisory
http://www.vupen.com/english/advisories/2007/1749	Third Party Advisory
http://www.exploit-db.com/exploits/6155	Exploit Third Party Advisory
http://www.securityfocus.com/archive/1/494868	Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34197	Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5036	Third Party Advisory

Configuration 1

cpe:2.3:o:cisco:ios:*:*:*:*:*:*:*:*

---

Published : 2007-05-10 12:19

Updated : 2020-05-22 05:16

---

NVD link : CVE-2007-2586

Mitre link : CVE-2007-2586

No products.

CWE-863