VulnerabilityModified
CVE-2007-1563
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an…
MEDIUM 6.8EPSS 4.85%
Does this matter?
Lower severity and a low EPSS score (4.85%). Track it; it rarely justifies an emergency change on its own.
Description
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 4.85% probability · 92th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-200
- Affected
- opera/opera browser
- Source
- cve@mitre.org
References
- http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf
- http://secunia.com/advisories/25027Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_28_opera.html
- http://www.securityfocus.com/bid/23089
- http://www.securitytracker.com/id?1017802
- http://www.vupen.com/english/advisories/2007/1075Vendor Advisory
- http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf
- http://secunia.com/advisories/25027Vendor Advisory
- http://www.novell.com/linux/security/advisories/2007_28_opera.html
- http://www.securityfocus.com/bid/23089
- http://www.securitytracker.com/id?1017802
- http://www.vupen.com/english/advisories/2007/1075Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.