← back
CVE-2007-1563

CVE-2007-1563

EPSS 4.8%
The FTP protocol implementation in Opera 9.10 allows remote attackers to allows remote servers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/29769unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdfhttp://secunia.com/advisories/25027http://www.novell.com/linux/security/advisories/2007_28_opera.htmlhttp://www.securityfocus.com/bid/23089http://www.securitytracker.com/id?1017802http://www.vupen.com/english/advisories/2007/1075