CVE-2007-1562
NoneCVSS
—
EPSS
14.3%
Published
Mar 21, 2007
CISA due date
—
The record
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Red Hat:enterprise_linux:2.1::as | seamonkey | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-chat | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-mail | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::as | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-chat | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-mail | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::aw | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-chat | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-mail | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::es | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-chat | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-mail | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:2.1::ws | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el2 |
| Red Hat:enterprise_linux:3::as | seamonkey | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-chat | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-debuginfo | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-mail | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::as | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-chat | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-mail | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::desktop | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-chat | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-debuginfo | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-mail | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::es | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-chat | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-debuginfo | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-js-debugger | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-mail | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nspr-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:3::ws | seamonkey-nss-devel | 0 | 0:1.0.9-0.1.el3 |
| Red Hat:enterprise_linux:4::as | devhelp | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-debuginfo | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::as | devhelp-devel | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::as | firefox | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::as | firefox-debuginfo | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-chat | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-debuginfo | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-devel | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-dom-inspector | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-js-debugger | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::as | seamonkey-mail | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-debuginfo | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::desktop | devhelp-devel | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | firefox-debuginfo | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-chat | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-debuginfo | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-devel | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-dom-inspector | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-js-debugger | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::desktop | seamonkey-mail | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | devhelp | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-debuginfo | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::es | devhelp-devel | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::es | firefox | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::es | firefox-debuginfo | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-chat | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-debuginfo | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-devel | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-dom-inspector | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-js-debugger | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::es | seamonkey-mail | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-debuginfo | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::ws | devhelp-devel | 0 | 0:0.10-0.8.el4 |
| Red Hat:enterprise_linux:4::ws | firefox | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | firefox-debuginfo | 0 | 0:1.5.0.12-0.1.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-chat | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-debuginfo | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-devel | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-dom-inspector | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-js-debugger | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:4::ws | seamonkey-mail | 0 | 0:1.0.9-2.el4 |
| Red Hat:enterprise_linux:5::client | devhelp | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-debuginfo | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::client | devhelp-devel | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::client | firefox | 0 | 0:1.5.0.12-1.el5 |
| Red Hat:enterprise_linux:5::client | firefox-debuginfo | 0 | 0:1.5.0.12-1.el5 |
| Red Hat:enterprise_linux:5::client | yelp | 0 | 0:2.16.0-15.el5 |
| Red Hat:enterprise_linux:5::client | yelp-debuginfo | 0 | 0:2.16.0-15.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-debuginfo | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::client_workstation | devhelp-devel | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::server | devhelp | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-debuginfo | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::server | devhelp-devel | 0 | 0:0.12-11.el5 |
| Red Hat:enterprise_linux:5::server | firefox | 0 | 0:1.5.0.12-1.el5 |
| Red Hat:enterprise_linux:5::server | firefox-debuginfo | 0 | 0:1.5.0.12-1.el5 |
| Red Hat:enterprise_linux:5::server | yelp | 0 | 0:2.16.0-15.el5 |
| Red Hat:enterprise_linux:5::server | yelp-debuginfo | 0 | 0:2.16.0-15.el5 |
Related vulnerabilities
- CVE-2009-1169 The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and… Also affects seamonkey
- CVE-2008-0016 Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before… Also affects seamonkey
- CVE-2008-2798 Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird… Also affects seamonkey
- CVE-2007-2292 CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox… Also affects seamonkey
- CVE-2007-0009 Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services… Also affects seamonkey
- CVE-2007-0981 Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and… Also affects seamonkey
- CVE-2010-3765 Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before… Also affects seamonkey
- CVE-2010-1205 Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in… Also affects seamonkey