CVE-2007-0020
UnknownEPSS 7.79%
Last modified
CVE-2007-0020 is a vulnerability of currently unknown severity. Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL.. EPSS estimates a 7.79% chance of exploitation in the next 30 days.
Description
Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Panic Transmit | Panic Transmit | <= 3.5.5 |
References
- http://projects.info-pull.com/moab/MOAB-19-01-2007.htmlVendor Advisory
- http://secunia.com/advisories/23861Vendor Advisory
- http://projects.info-pull.com/moab/MOAB-19-01-2007.htmlVendor Advisory
- http://secunia.com/advisories/23861Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-0020?
Heap-based buffer overflow in the SFTP protocol handler for Panic Transmit (Transmit.app) up to 3.5.5 allows remote attackers to execute arbitrary code via a long ftps:// URL.
How severe is CVE-2007-0020?
Severity scoring for CVE-2007-0020 is pending analysis. The EPSS model estimates a 7.79% probability of exploitation in the next 30 days.
How do I fix CVE-2007-0020?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-0014ChainKey Java Code Protection allows attackers to decompile …
- CVE-2007-0015Buffer overflow in Apple QuickTime 7.1.3 allows remote attac…
- CVE-2007-0016Stack-based buffer overflow in MoviePlay 4.76 allows remote …
- CVE-2007-0017Multiple format string vulnerabilities in (1) the cdio_log_h…
- CVE-2007-0018Stack-based buffer overflow in the NCTAudioFile2.AudioFile A…
- CVE-2007-0019Multiple heap-based buffer overflows in rumpusd in Rumpus 5.…
- CVE-2007-0021Format string vulnerability in Apple iChat 3.1.6 allows remo…
- CVE-2007-0022Untrusted search path vulnerability in writeconfig in Apple …
- CVE-2007-0023The CFUserNotificationSendRequest function in UserNotificati…
- CVE-2007-0024Integer overflow in the Vector Markup Language (VML) impleme…
- CVE-2007-0025The MFC component in Microsoft Windows 2000 SP4, XP SP2, and…
- CVE-2007-0026The OLE Dialog component in Microsoft Windows 2000 SP4, XP S…
Are you affected by CVE-2007-0020?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST