Unscored severity · published Sep 17, 2007
CVE-2007-4909
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of…
–
CVSS
3.5%
EPSS
No
On KEV
Description
Interpretation conflict in WinSCP before 4.0.4 allows remote attackers to perform arbitrary file transfers with a remote server via file-transfer commands in the final portion of a (1) scp, and possibly a (2) sftp or (3) ftp, URL, as demonstrated by a URL specifying login to the remote server with a username of scp, which is interpreted as an HTTP scheme name by the protocol handler in a web browser, but is interpreted as a username by WinSCP. NOTE: this is related to an incomplete fix for CVE-2006-3015.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.5% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WI
Winscp · Winscp
2.0.0; 3.5.5_beta; 3.5.6; 3.6; 3.6.1; 3.6.5_beta; +6 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4909
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4909
Patch
http://secunia.com/advisories/26820
securityreason.com
http://securityreason.com/securityalert/3141
winscp.cvs.sourceforge.net
http://winscp.cvs.sourceforge.net/winscp/winscp3/core/SessionData.cpp?r1=1.29&r2=1.30
winscp.net
http://winscp.net/eng/docs/history/
www.securityfocus.com
http://www.securityfocus.com/archive/1/479298/100/0/threaded
Patch
http://www.securityfocus.com/bid/25655
More from Winscp
9.8
CVE-2021-3331
WinSCP before 5.17.10 allows remote attackers to execute arbitrary programs when the URL handler encounters a crafted URL that loads session settings
9.8
CVE-2020-28864
Buffer overflow in WinSCP 5.17.8 allows a malicious FTP server to cause a denial of service or possibly have other unspecified impact via a long file name
7.5
CVE-2018-20684
In WinSCP before 5.14 beta, due to missing validation, the scp implementation would accept arbitrary files sent by the server, potentially overwriting unrelated files
6.8
CVE-2019-6110
In OpenSSH 7.9, due to accepting and displaying arbitrary stderr output from the server, a malicious server (or Man-in-The-Middle attacker) can manipulate the client output, for…
6.8
CVE-2019-6109
An issue was discovered in OpenSSH 7.9