Test ID:	1.3.6.1.4.1.25623.1.0.9999996
Category:	FTP
Title:	Cisco IOS FTP Server Authentication Bypass Vulnerability
Summary:	The Cisco IOS FTP server is enabled on the remote system; which does not properly verify authentication, allowing for anonymous access to the file system.
Description:	Summary: The Cisco IOS FTP server is enabled on the remote system which does not properly verify authentication, allowing for anonymous access to the file system. Vulnerability Impact: An attacker could use the ftp server to view/download confidential configuration files, or upload replacements which will be used at startup. Solution: No known solution was made available for at least one year since the disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2586 BugTraq ID: 23885 http://www.securityfocus.com/bid/23885 Bugtraq: 20080729 Remote Cisco IOS FTP exploit (Google Search) http://www.securityfocus.com/archive/1/494868 Bugtraq: 20090120 Re: Remote Cisco IOS FTP exploit (Google Search) http://seclists.org/bugtraq/2009/Jan/0183.html Cisco Security Advisory: 20070509 Multiple Vulnerabilities in the IOS FTP Server http://www.cisco.com/en/US/products/products_security_advisory09186a00808399d0.shtml http://www.exploit-db.com/exploits/6155 http://www.osvdb.org/35334 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5036 http://www.securitytracker.com/id?1018030 http://secunia.com/advisories/25199 http://www.vupen.com/english/advisories/2007/1749 XForce ISS Database: cisco-ios-ftp-unauthorized-access(34197) https://exchange.xforce.ibmcloud.com/vulnerabilities/34197
Copyright	Copyright (C) 2008 Ferdy Riphagen

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.