VULNERABILITY INTELLIGENCE

CVE-2007-1564

CVSS score6.8 MEDIUM
EPSS probability3.78%
CISA KEVNot currently listed
Published2007-03-21
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:P/A:P

Description

The FTP protocol implementation in Konqueror 3.5.5 allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references