CVE

Id
37133  
CVE No.
CVE-2008-7016  
Status
Candidate  
Description
tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server.  
Phase
Assigned (20090821)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
403438 37133 CVE-2008-7016 CONFIRM:http://freshmeat.net/projects/tnftpd/?branch_id=14355&release_id=285654#  View
403439 37133 CVE-2008-7016 OSVDB:48637  View
403440 37133 CVE-2008-7016 URL:http://osvdb.org/48637  View
403441 37133 CVE-2008-7016 SECUNIA:31958  View
403442 37133 CVE-2008-7016 URL:http://secunia.com/advisories/31958  View
403443 37133 CVE-2008-7016 XF:tnftpd-url-csrf(45534)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43330 JVNDB-2009-004337 McAfee SafeBoot Device Encryption における重要な情報を取得される脆弱性 McAfee SafeBoot Device Encryption は、起動前の認証パスワードを BIOS Keyboard バッファに格納する、および使用後にそのバッファをクリアにしないため、重要な情報を取得される脆弱性が存在します。 CVE-2008-7020 37133 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004337.html  View