CVE-2007-2318

{"id": "CVE-2007-2318", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2007-04-26T21:19:00.000", "references": [{"url": "http://osvdb.org/34436", "source": "cve@mitre.org"}, {"url": "http://osvdb.org/34437", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/24894", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/23506", "tags": ["Patch"], "source": "cve@mitre.org"}, {"url": "http://osvdb.org/34436", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://osvdb.org/34437", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/24894", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://sourceforge.net/project/shownotes.php?release_id=501534&group_id=21558", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/23506", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in FileZilla before 2.2.32 allow remote attackers to execute arbitrary code via format string specifiers in (1) FTP server responses or (2) data sent by an FTP server. NOTE: some of these details are obtained from third party information."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de formato de cadena en FileZilla versiones anteriores a 2.2.32 permiten a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante especificadores de formato de cadena en (1) Repuestas de servidor FTP \u00f3 (2) datos enviados por un servidor FTP.\r\nNOTA: algunos de estos detalles se han obtenido de informaci\u00f3n de terceros."}], "lastModified": "2024-11-21T00:30:29.630", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:filezilla:filezilla:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BA3E8431-3DD2-483A-8DB6-2F8F0A123755", "versionEndIncluding": "2.2.31"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}