NVD

Id
53746  
Name
CVE-2007-1562  
Description
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-21  
Modified Date
2011-03-07  
Seq
2007-1562  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272425 53746 CVE-2007-1562 http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf  View
272426 53746 CVE-2007-1562 HPSBUX02153  View
272427 53746 CVE-2007-1562 oval:org.mitre.oval:def:11431  View
272428 53746 CVE-2007-1562 http://www.mozilla.org/security/announce/2007/mfsa2007-11.html  View
272429 53746 CVE-2007-1562 SUSE-SA:2007:036  View
272430 53746 CVE-2007-1562 RHSA-2007:0400  View
272431 53746 CVE-2007-1562 RHSA-2007:0402  View
272432 53746 CVE-2007-1562 20070322 FLEA-2007-0001-1: firefox  View
272433 53746 CVE-2007-1562 20070531 FLEA-2007-0023-1: firefox  View
272434 53746 CVE-2007-1562 23082  View
272435 53746 CVE-2007-1562 1017800  View
272436 53746 CVE-2007-1562 USN-443-1  View
272437 53746 CVE-2007-1562 ADV-2007-1034  View
272438 53746 CVE-2007-1562 firefox-nsftpstate-information-disclosure(33119)  View
272439 53746 CVE-2007-1562 https://bugzilla.mozilla.org/show_bug.cgi?id=370559  View
272440 53746 CVE-2007-1562 https://issues.rpath.com/browse/RPL-1157  View
272441 53746 CVE-2007-1562 https://issues.rpath.com/browse/RPL-1424  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51558 JVNDB-2007-000220 Mozilla Firefox の PASV レスポンス処理によりポートスキャンが実行される脆弱性 Mozilla Firefox の FTP プロトコルの実装には、代替サーバのアドレスを含む PASV レスポンスを処理することで内部ネットワークのホストに対するポートスキャンの実行に悪用される脆弱性が存在します。 CVE-2007-1562 24917 CVE-2007-1562 53746 6.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000220.html 2007-03-21 2007-07-31 View