CVE-2007-2403
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows...
CVE-2007-2403 is a medium vulnerability (CVSS 6.8) in Apple Cfnetwork, published August 3, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.42%, the 73rd percentile. No source names a fixed version.
- Severity
- 6.8 MediumCVSS 2.0, NVD
- Exploit chance
- 1.42%EPSS, 73rd percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
Exploit likelihood
Affected products
What each source reports
NVD Score used
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
- Record
CVE-2007-2403- CVSS 2.0
- 6.8 Medium
AV:N/AC:M/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
- Record
CVE-2007-2403- Updated
- 2026-11-02
EUVDEUVD-2007-2398No score
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
- Record
EUVD-2007-2398- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fhp8-2h74-w5rmNo score
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows...
CFNetwork on Apple Mac OS X 10.3.9 and 10.4.10 does not properly validate ftp: URIs, which allows remote attackers to trigger the transmission of arbitrary FTP commands to arbitrary FTP servers.
- Record
GHSA-fhp8-2h74-w5rm- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
vupen.com/english/advisories/2007/2732
lists.apple.com/archives/security-announce//2007/Jul/msg00004.html
securitytracker.com/id?1018491
exchange.xforce.ibmcloud.com/vulnerabilities/35721
docs.info.apple.com/article.html?artnum=306172
securityfocus.com/bid/25159
secunia.com/advisories/26235
nvd.nist.gov/vuln/detail/CVE-2007-2403
github.com/advisories/GHSA-fhp8-2h74-w5rm