PT-2008-1549 · Akamai · Akamai Download Manager

Publicado 2008-05-01 · Atualizado 2017-08-08 · CVE-2007-6339

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Akamai Download Manager versions prior to 2.2.3.5

Description The issue allows remote attackers to force the download and execution of arbitrary code via unspecified undocumented object parameters.

Recommendations For versions prior to 2.2.3.5, update to version 2.2.3.5 or later to resolve the issue.

Correção

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2007-6339

Produtos afetados

Akamai Download Manager

Referências · 9

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=695 · Correção
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6339 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6339 · Nota de Segurança
• http://secunia.com/advisories/30037 · Nota
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html · Nota
• http://securitytracker.com/id?1019955 · Nota
• http://securityfocus.com/bid/28993 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42117 · Nota
• http://vupen.com/english/advisories/2008/1408/references · Nota