Description
CFFTP in CFNetwork for Apple Mac OS X 10.4 through 10.4.10 allows remote FTP servers to force clients to connect to other hosts via crafted responses to FTP PASV commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://securitytracker.com/id?1018950 ↗
- http://www.securityfocus.com/bid/26444 ↗
- http://lists.apple.com/archives/security-announce/2007/Nov/msg00002.html ↗
- http://docs.info.apple.com/article.html?artnum=307041 ↗
- http://www.vupen.com/english/advisories/2007/3868 ↗
- http://secunia.com/advisories/27643 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/38462 ↗
- http://www.us-cert.gov/cas/techalerts/TA07-319A.html ↗