Date: Thu, 22 Mar 2007 00:42:32 -0400
From: Foresight Linux Essential Announcement Service <foresight-security-noreply@foresightlinux.org.>
To: foresight-security-announce@lists.rpath.org
Subject: FLEA-2007-0001-1: firefox
References: <45EF374E.1090207@foresightlinux.org.> <45EF8D85.3050102@moritz-naumann.com.>
In-Reply-To: <45EF8D85.3050102@moritz-naumann.com.>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: antivirus-gw at tyumen.ru
Foresight Linux Essential Advisory: 2007-0001-1
Published: 2007-03-22
Rating: Minor
Updated Versions:
firefox=/foresight.rpath.org@fl:1-devel//1/2.0.0.3-1-1
group-dist=/foresight.rpath.org@fl:1-devel//1/1.1-0.8-2
References:
http://www.mozilla.org/security/announce/2007/mfsa2007-11.html
Description:
Previous versions of the Firefox package were vulnerable to an
information disclosure issue. Firefox's handling of PASV FTP connections
could allow a specially crafted server to perform rudimentary port
scanning on the client machine, giving the FTP server information about
the client's system. In and of itself, this is not going to cause a
remote code exploit, but could aid a malicious individual in other attacks.
