CVE-2015-7665

MEDIUM

Tails <1.7 - Info Disclosure

Title source: llm

Description

Tails before 1.7 includes the wget program but does not prevent automatic fallback from passive FTP to active FTP, which allows remote FTP servers to discover the Tor client IP address by reading a (1) PORT or (2) EPRT command. NOTE: within wget itself, the automatic fallback is not considered a vulnerability by CVE.

References (8)

Scores

CVSS v3 5.3
EPSS 0.0048
EPSS Percentile 64.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-200
Status draft

Affected Products (1)

tails_project/tails < 1.6

Timeline

Published Dec 27, 2015
Tracked Since Feb 18, 2026