PT-2015-2130
CVE-2015-5912
·
تاريخ النشر
2015-09-18
·
تاريخ التحديث
2018-10-09
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 9
Description
The issue is related to errors in the code of the CFNetwork FTPProtocol component. It allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses. This can be exploited by a remote attacker to initiate TCP connections with nodes on the internal network using specially formed response requests.
Recommendations
For versions prior to 9, update to iOS version 9 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾