← Database

CVE-2007-1562

MEDIUM CVSS: 6.8 Published: 2007-03-21 Modified: 2026-06-16

Description

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Affected Platforms

Mozilla FirefoxCanonical Ubuntu Linux

Weakness Type

CWE-200

References