Description
The CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to trigger TCP connection attempts to intranet hosts via crafted responses.
References
- 1033609 vdb-entry
- https://support.apple.com/HT205212
- APPLE-SA-2015-09-30-3 vendor-advisory
- 76764 vdb-entry
- https://support.apple.com/HT205267
- 20150916 Apple Safari FTP PASV manipulation vulnerability (CVE-2015-5912) mailing-list
- APPLE-SA-2015-09-16-1 vendor-advisory