CVE

Id
32002  
CVE No.
CVE-2008-1885  
Status
Candidate  
Description
Directory traversal vulnerability in the NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download allows remote attackers to download arbitrary code onto a client system via a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. NOTE: this can be leveraged for code execution by writing to a Startup folder.  
Phase
Assigned (20080418)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345196 32002 CVE-2008-1885 BUGTRAQ:20080407 CDNetworks Nefficient Download(NeffyLauncher.dll) Vulnerabilities  View
345197 32002 CVE-2008-1885 URL:http://seclists.org/bugtraq/2008/Apr/0065.html  View
345198 32002 CVE-2008-1885 MILW0RM:5397  View
345199 32002 CVE-2008-1885 URL:http://www.milw0rm.com/exploits/5397  View
345200 32002 CVE-2008-1885 BID:28666  View
345201 32002 CVE-2008-1885 URL:http://www.securityfocus.com/bid/28666  View
345202 32002 CVE-2008-1885 VUPEN:ADV-2008-1186  View
345203 32002 CVE-2008-1885 URL:http://www.vupen.com/english/advisories/2008/1186  View
345204 32002 CVE-2008-1885 SECUNIA:29692  View
345205 32002 CVE-2008-1885 URL:http://secunia.com/advisories/29692  View
345206 32002 CVE-2008-1885 XF:nefficientdload-neffylauncher-dir-traversal(41743)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
50401 JVNDB-2008-005711 XplodPHP AutoTutorials の viewcat.php における SQL インジェクションの脆弱性 XplodPHP AutoTutorials の viewcat.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-1889 32002 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-005711.html  View