← Back

CVE-2007-2586

nvd nist
Published: May 10, 2007Modified: Apr 23, 2026

JSON object

Loading...
9.3
Vector
AV:N/AC:M/Au:N/C:C/I:C/A:C
Exploitability: 8.6 / Impact: 10.0
Source: NVD

Description

The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.

Affected (380)

Products: Cisco: Ios
1 product
Ios
Configuration A
380 vulnerable
Vulnerable SoftwareAffected Versions
Cisco
Version 12.0(10)s1
Version 12.0(10)s2
Version 12.0(10)s3
Version 12.0(10)s3b
Version 12.0(10)s4
Version 12.0(10)s5
Version 12.0(10)s6
Version 12.0(10)s7
Version 12.0(10)s8
Version 12.0(10)s
Version 12.0(10)st1
Version 12.0(10)st2
Version 12.0(10)st
Version 12.0(11)s1
Version 12.0(11)s2
Version 12.0(11)s3
Version 12.0(11)s4
Version 12.0(11)s5
Version 12.0(11)s6
Version 12.0(11)s
Version 12.0(11)st1
Version 12.0(11)st2
Version 12.0(11)st3
Version 12.0(11)st4
Version 12.0(11)st
Version 12.0(1)t1
Version 12.0(1)t
Version 12.0(1)xe
Version 12.0(28)s4a
Version 12.0(2)s
Version 12.0(2)t1
Version 12.0(2)t
Version 12.0(2)xe1
Version 12.0(2)xe3
Version 12.0(2)xe4
Version 12.0(2)xe
Version 12.0(2a)t1
Version 12.0(31)sz2
Version 12.0(3)s
Version 12.0(3)t2
Version 12.0(3)t3
Version 12.0(3)t
Version 12.0(4)s
Version 12.0(4)t
Version 12.0(4)xe2
Version 12.0(4)xe
Version 12.0(5)s
Version 12.0(5)t1
Version 12.0(5)t
Version 12.0(5)xe1
Version 12.0(5)xe2
Version 12.0(5)xe3
Version 12.0(5)xe4
Version 12.0(5)xe5
Version 12.0(5)xe8
Version 12.0(5)xe
Version 12.0(5)xk1
Version 12.0(5)xk2
Version 12.0(5)xk
Version 12.0(5)xt1
Version 12.0(6)s1
Version 12.0(6)s2
Version 12.0(6)s
Version 12.0(7)s1
Version 12.0(7)s
Version 12.0(7)t1
Version 12.0(7)t2
Version 12.0(7)t3
Version 12.0(7)t
Version 12.0(7)xk1
Version 12.0(7)xk2
Version 12.0(7)xk3
Version 12.0(7)xk
Version 12.0(8)s1
Version 12.0(8)s
Version 12.0(9)s8
Version 12.0(9)s
Version 12.0(9)st
Version 12.1(3)xi
Version 12.1(5)xm1
Version 12.1(5)xm2
Version 12.1(5)xm3
Version 12.1(5)xm4
Version 12.1(5)xm5
Version 12.1(5)xm7
Version 12.1(5)xm8
Version 12.1(5)xm
Version 12.1(5c)ex1
Version 12.1(5c)ex
Version 12.1(6)ex
Version 12.1(8b)ex4
Version 12.1(9)ex
Version 12.2(11)yz1
Version 12.2(11)yz2
Version 12.2(11)yz3
Version 12.2(11)yz
Version 12.2(12b)m1
Version 12.2(12h)m1
Version 12.2(13)zf1
Version 12.2(13)zf2
Version 12.2(13)zf
Version 12.2(13)zh1
Version 12.2(13)zh2
Version 12.2(13)zh3
Version 12.2(13)zh4
Version 12.2(13)zh5
Version 12.2(13)zh
Version 12.2(13b)m1
Version 12.2(13b)m2
Version 12.2(14)sz1
Version 12.2(14)sz2
Version 12.2(14)sz3
Version 12.2(14)sz4
Version 12.2(14)sz5
Version 12.2(14)sz6
Version 12.2(14)sz
Version 12.2(15)zj1
Version 12.2(15)zj2
Version 12.2(15)zj3
Version 12.2(15)zj4
Version 12.2(15)zj5
Version 12.2(15)zj
Version 12.2(15)zl1
Version 12.2(15)zl
Version 12.2(15)zn
Version 12.2(18)s1
Version 12.2(18)s2
Version 12.2(18)s3
Version 12.2(18)s4
Version 12.2(18)s
Version 12.2(20)s1
Version 12.2(20)s2
Version 12.2(20)s2a
Version 12.2(20)s3
Version 12.2(20)s4
Version 12.2(20)s4a
Version 12.2(20)s5
Version 12.2(20)s6
Version 12.2(20)s
Version 12.2(22)s
Version 12.2(25)s1
Version 12.2(25)s2
Version 12.2(25)s
Version 12.2(25)se
Version 12.2(8)zb
Version 12.2(9)yo1
Version 12.2(9)yo2
Version 12.2(9)yo3
Version 12.2(9)yo4
Version 12.2(9)yo
Version 12.3(10a)m0
Version 12.3(11)ja2
Version 12.3(11)jx1
Version 12.3(11)jx
Version 12.3(11)t10
Version 12.3(11)t11
Version 12.3(11)t1
Version 12.3(11)t2
Version 12.3(11)t3
Version 12.3(11)t4
Version 12.3(11)t5
Version 12.3(11)t6
Version 12.3(11)t7
Version 12.3(11)t8
Version 12.3(11)t9
Version 12.3(11)t
Version 12.3(11)to3
Version 12.3(11)xl1
Version 12.3(11)xl2
Version 12.3(11)xl3
Version 12.3(11)xl
Version 12.3(11)yf2
Version 12.3(11)yk1
Version 12.3(11)yk2
Version 12.3(11)yk
Version 12.3(11)yl1
Version 12.3(11)yl2
Version 12.3(11)yl
Version 12.3(11)ys1
Version 12.3(11)ys
Version 12.3(11)yz1
Version 12.3(11)yz
Version 12.3(11)zb1
Version 12.3(11)zb
Version 12.3(14)t1
Version 12.3(14)t2
Version 12.3(14)t3
Version 12.3(14)t4
Version 12.3(14)t5
Version 12.3(14)t6
Version 12.3(14)t7
Version 12.3(14)t
Version 12.3(14)ym2
Version 12.3(14)ym3
Version 12.3(14)ym4
Version 12.3(14)ym5
Version 12.3(14)ym6
Version 12.3(14)ym7
Version 12.3(14)ym8
Version 12.3(14)ym9
Version 12.3(14)yt1
Version 12.3(14)yt
Version 12.3(1a)b
Version 12.3(2)ja3
Version 12.3(2)ja4
Version 12.3(2)t1
Version 12.3(2)t2
Version 12.3(2)t3
Version 12.3(2)t4
Version 12.3(2)t5
Version 12.3(2)t6
Version 12.3(2)t7
Version 12.3(2)t8
Version 12.3(2)t9
Version 12.3(2)t
Version 12.3(2)xa1
Version 12.3(2)xa2
Version 12.3(2)xa3
Version 12.3(2)xa4
Version 12.3(2)xa5
Version 12.3(2)xa
Version 12.3(2)xc1
Version 12.3(2)xc2
Version 12.3(2)xc
Version 12.3(2)xe1
Version 12.3(2)xe2
Version 12.3(2)xe3
Version 12.3(2)xe4
Version 12.3(2)xe
Version 12.3(2)xf
Version 12.3(3)b1
Version 12.3(3)b
Version 12.3(4)t10
Version 12.3(4)t11
Version 12.3(4)t1
Version 12.3(4)t2
Version 12.3(4)t3
Version 12.3(4)t4
Version 12.3(4)t5
Version 12.3(4)t6
Version 12.3(4)t7
Version 12.3(4)t8
Version 12.3(4)t9
Version 12.3(4)t
Version 12.3(4)tpc11a
Version 12.3(4)xd1
Version 12.3(4)xd2
Version 12.3(4)xd3
Version 12.3(4)xd4
Version 12.3(4)xd
Version 12.3(4)xg1
Version 12.3(4)xg2
Version 12.3(4)xg3
Version 12.3(4)xg4
Version 12.3(4)xg5
Version 12.3(4)xg
Version 12.3(4)xh1
Version 12.3(4)xh
Version 12.3(4)xk1
Version 12.3(4)xk2
Version 12.3(4)xk3
Version 12.3(4)xk4
Version 12.3(4)xk
Version 12.3(4)xq1
Version 12.3(4)xq
Version 12.3(4)ye1
Version 12.3(4)ye
Version 12.3(5a)b0a
Version 12.3(5a)b1
Version 12.3(5a)b2
Version 12.3(5a)b3
Version 12.3(5a)b4
Version 12.3(5a)b5
Version 12.3(5a)b
Version 12.3(7)jx9
Version 12.3(7)t10
Version 12.3(7)t11
Version 12.3(7)t12
Version 12.3(7)t1
Version 12.3(7)t2
Version 12.3(7)t3
Version 12.3(7)t4
Version 12.3(7)t6
Version 12.3(7)t7
Version 12.3(7)t8
Version 12.3(7)t9
Version 12.3(7)t
Version 12.3(7)xi3a
Version 12.3(7)xl
Version 12.3(7)xr1
Version 12.3(7)xr2
Version 12.3(7)xr3
Version 12.3(7)xr4
Version 12.3(7)xr5
Version 12.3(7)xr6
Version 12.3(7)xr
Version 12.3(7)xs1
Version 12.3(7)xs2
Version 12.3(7)xs
Version 12.3(8)jk
Version 12.3(8)t10
Version 12.3(8)t11
Version 12.3(8)t1
Version 12.3(8)t2
Version 12.3(8)t3
Version 12.3(8)t4
Version 12.3(8)t5
Version 12.3(8)t6
Version 12.3(8)t7
Version 12.3(8)t8
Version 12.3(8)t9
Version 12.3(8)t
Version 12.3(8)xx1
Version 12.3(8)xx2
Version 12.3(8)xx2a
Version 12.3(8)xx2b
Version 12.3(8)xx2c
Version 12.3(8)xx
Version 12.3(8)ya1
Version 12.3(8)ya
Version 12.3(8)yc1
Version 12.3(8)yc2
Version 12.3(8)yc3
Version 12.3(8)yc
Version 12.3(8)yd1
Version 12.3(8)yd
Version 12.3(8)yg1
Version 12.3(8)yg2
Version 12.3(8)yg3
Version 12.3(8)yg4
Version 12.3(8)yg5
Version 12.3(8)yg
Version 12.3(8)yh
Version 12.3(8)yi1
Version 12.3(8)yi2
Version 12.3(8)yi3
Version 12.3(8)yi
Version 12.3(8)za
Version 12.3(9)m0
Version 12.3(9)m1
Version 12.4(11)sw1
Version 12.4(11)sw
Version 12.4(2)t1
Version 12.4(2)t2
Version 12.4(2)t3
Version 12.4(2)t4
Version 12.4(2)t5
Version 12.4(2)t
Version 12.4(2)xa1
Version 12.4(2)xa2
Version 12.4(2)xa
Version 12.4(4)t1
Version 12.4(4)t2
Version 12.4(4)t3
Version 12.4(4)t4
Version 12.4(4)t5
Version 12.4(4)t
Version 12.4(4)xc1
Version 12.4(4)xc2
Version 12.4(4)xc3
Version 12.4(4)xc4
Version 12.4(4)xc5
Version 12.4(4)xc
Version 12.4(4)xd1
Version 12.4(4)xd2
Version 12.4(4)xd3
Version 12.4(4)xd
Version 12.4(5a)m0
Version 12.4(6)t1
Version 12.4(6)t2
Version 12.4(6)t3
Version 12.4(6)t4
Version 12.4(6)t5
Version 12.4(6)t
Version 12.4(6)xe1
Version 12.4(6)xe2
Version 12.4(6)xe
Version 12.4(9)t0a
Version 12.4(9)t1
Version 12.4(9)t

References (22)

Source: cve@mitre.org
Issue TrackingMailing ListThird Party Advisory
Source: cve@mitre.org
Not ApplicableThird Party Advisory
Source: cve@mitre.org
ExploitThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken Link
Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken LinkExploitThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Broken LinkThird Party AdvisoryVDB Entry
Source: cve@mitre.org
Permissions RequiredThird Party Advisory
Source: cve@mitre.org
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingMailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not ApplicableThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Not Applicable
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkExploitThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions RequiredThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party AdvisoryVDB Entry
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkThird Party Advisory

Timeline

No history available yet.