CVE-2010-0962

2010-03-1022:00:00

mitre

www.cve.org

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

84.1%

JSON

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT command.