The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2007-05-09T22:00:00

Updated: 2024-08-07T13:42:33.552Z

Reserved: 2007-05-09T00:00:00

Link: CVE-2007-2586

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2007-05-10T00:19:00.000

Modified: 2023-05-09T13:53:22.263

Link: CVE-2007-2586

cve-icon Redhat

No data.