Description
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.vupen.com/english/advisories/2007/2732 ↗
- http://lists.apple.com/archives/security-announce//2007/Jul/msg00004.html ↗
- http://securitytracker.com/id?1018491 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35721 ↗
- http://docs.info.apple.com/article.html?artnum=306172 ↗
- http://www.securityfocus.com/bid/25159 ↗
- http://secunia.com/advisories/26235 ↗