CVE

Id
31485  
CVE No.
CVE-2008-1368  
Status
Candidate  
Description
CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF (%0D%0A) before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or possibly a regression of CVE-2004-1166. NOTE: a trailing "//" can force Internet Explorer to try to reuse an existing authenticated connection.  
Phase
Assigned (20080317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
337251 31485 CVE-2008-1368 BUGTRAQ:20080313 Rapid7 Advisory R7-0032: Microsoft Internet Explorer FTP Command Injection Vulnerability  View
337252 31485 CVE-2008-1368 URL:http://www.securityfocus.com/archive/1/archive/1/489500/100/0/threaded  View
337253 31485 CVE-2008-1368 MISC:http://www.rapid7.com/advisories/R7-0032.jsp  View
337254 31485 CVE-2008-1368 BID:28208  View
337255 31485 CVE-2008-1368 URL:http://www.securityfocus.com/bid/28208  View
337256 31485 CVE-2008-1368 VUPEN:ADV-2008-0870  View
337257 31485 CVE-2008-1368 URL:http://www.vupen.com/english/advisories/2008/0870  View
337258 31485 CVE-2008-1368 SECUNIA:29346  View
337259 31485 CVE-2008-1368 URL:http://secunia.com/advisories/29346  View
337260 31485 CVE-2008-1368 SREASON:3750  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52494 JVNDB-2007-001186 bzip2 の bzlib.c におけるサービス運用妨害 (DoS) の脆弱性 bzip2 の bzlib.c には、ファイルの展開処理に不備が存在するため、bzip がクラッシュする脆弱性が存在します。 CVE-2008-1372 31485 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001186.html  View