CVE-2007-1562

2007-03-2119:19:00

CWE-200

mitre

web.nvd.nist.gov

mozilla

firefox

ftp

protocol

remote attackers

security vulnerability

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

5.5

Confidence

High

EPSS

0.037

Percentile

91.8%

JSON

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Affected configurations

Nvd

Node

mozillafirefoxRange1.5–1.5.0.11

mozillafirefoxRange2.0–2.0.0.3

Node

canonicalubuntu_linuxMatch5.10

canonicalubuntu_linuxMatch6.06lts

canonicalubuntu_linuxMatch6.10

VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*
canonicalubuntu_linux5.10cpe:2.3:o:canonical:ubuntu_linux:5.10:*:*:*:*:*:*:*
canonicalubuntu_linux6.06cpe:2.3:o:canonical:ubuntu_linux:6.06:*:*:*:lts:*:*:*
canonicalubuntu_linux6.10cpe:2.3:o:canonical:ubuntu_linux:6.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mozilla	firefox	*	cpe:2.3:a:mozilla:firefox::::::::
canonical	ubuntu_linux	5.10	cpe:2.3:o:canonical:ubuntu_linux:5.10:::::::*
canonical	ubuntu_linux	6.06	cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::
canonical	ubuntu_linux	6.10	cpe:2.3:o:canonical:ubuntu_linux:6.10:::::::*