NetSight
IP …
medium6.8Public exploit code

CVE-2007-1562

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other serve…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Affected products

VendorProductAffected versions
MozillaFirefox
from 1.5 before 1.5.0.11
from 2.0 before 2.0.0.3
CanonicalUbuntu Linux
Versions 5.10, 6.06, 6.10

Weakness classification

CWE-200

References