Security Advisory

CVE-2010-0962

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2010-03-10 22:00:00
Last updated 2024-08-07 01:06:52
Assigner mitre
State PUBLISHED

Description

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command.