CVE-2007-1562: Canonical Ubuntu Linux

Medium severity, CVSS 6.8. EPSS: 13.8% chance of exploitation in the next 30 days.

The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive information by specifying an alternate server address in an FTP PASV response.

Affected products

• Canonical Ubuntu Linux: version 5.10 only; version 6.06 only; version 6.10 only
• Mozilla Firefox: from 1.5, before 1.5.0.11 (fixed in 1.5.0.11); from 2.0, before 2.0.0.3 (fixed in 2.0.0.3)

Published 2007-03-21. Last modified 2026-06-16.