CVE-2007-2586
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which...
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
Exploit likelihood
What each source reports
NVD Score used
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
- Record
CVE-2007-2586- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-863
- Updated
- 2026-11-02
CVE List No score
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
- Record
CVE-2007-2586- Updated
- 2026-11-02
EUVDEUVD-2007-2579 No score
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
- Record
EUVD-2007-2579- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-m5c2-384p-37r2 No score
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which...
The FTP Server in Cisco IOS 11.3 through 12.4 does not properly check user authorization, which allows remote attackers to execute arbitrary code, and have other impact including reading startup-config, as demonstrated by a crafted MKD command that involves access to a VTY device and overflows a buffer, aka bug ID CSCek55259.
- Record
GHSA-m5c2-384p-37r2- Weakness
- CWE-863
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Cisco IOS 12.3(18) (FTP Server) - Remote (Attached to GDB) | 2008-07-29 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-2586 is a high vulnerability (CVSS 9.3) in Cisco Ios, published May 9, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 14.4%, the 96th percentile. No source names a fixed version.
References
cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml
securityfocus.com/archive/1/494868
vupen.com/english/advisories/2007/1749
secunia.com/advisories/25199
exchange.xforce.ibmcloud.com/vulnerabilities/34197
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5036