Published: 21/03/2007 Updated: 09/12/2020

CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6

VMScore: 685

Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

The FTP protocol implementation in Mozilla Firefox prior to 1.5.0.11 and 2.x prior to 2.0.0.3 allows remote malicious users to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Vulnerable Product	Search on Vulmon	Subscribe to Product
mozilla firefox
canonical ubuntu linux 6.06
canonical ubuntu linux 5.10
canonical ubuntu linux 6.10

A flaw was discovered in how Firefox handled PASV FTP responses If a user were tricked into visiting a malicious FTP server, a remote attacker could perform a port-scan of machines within the user’s network, leading to private information disclosure ...

source: wwwsecurityfocuscom/bid/23082/info Mozilla Firefox is prone to vulnerability that may allow attackers to obtain potentially sensitive information A successful exploit of this issue would cause the affected application to connect to arbitrary TCP ports and potentially reveal sensitive information about services that are running o ...

CWE-200 http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf https://bugzilla.mozilla.org/show_bug.cgi?id=370559 http://www.mozilla.org/security/announce/2007/mfsa2007-11.html http://www.ubuntu.com/usn/usn-443-1 https://issues.rpath.com/browse/RPL-1157 https://issues.rpath.com/browse/RPL-1424 http://www.redhat.com/support/errata/RHSA-2007-0400.html http://www.redhat.com/support/errata/RHSA-2007-0402.html http://www.novell.com/linux/security/advisories/2007_36_mozilla.html http://www.securityfocus.com/bid/23082 http://www.securitytracker.com/id?1017800 http://secunia.com/advisories/25476 http://secunia.com/advisories/25490 http://secunia.com/advisories/25858 http://www.vupen.com/english/advisories/2007/1034 http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742 https://exchange.xforce.ibmcloud.com/vulnerabilities/33119 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11431 http://www.securityfocus.com/archive/1/470172/100/200/threaded http://www.securityfocus.com/archive/1/463501/100/0/threaded http://www.openwall.com/lists/oss-security/2020/12/09/1 https://usn.ubuntu.com/443-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/29768/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-1562

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect