CVE-2007-1562

no score yetEPSS 14%

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

EPSS: 14% chance of exploitation in the next 30 days; higher than 96% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2007-03-21
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

canonical:ubuntu_linux
mozilla:firefox

References

http://bindshell.net/papers/ftppasv/ftp-client-pasv-manipulation.pdf
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
http://secunia.com/advisories/25476
http://secunia.com/advisories/25490
http://secunia.com/advisories/25858

Check your stack JSON