PT-2008-3413 · Nefficient · Nefficient Download

Simon Ryeo · Publicado 2008-04-18 · Atualizado 2017-09-29 · CVE-2008-1885

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nefficient Download version 1.0.5

Description The issue allows remote attackers to download arbitrary code onto a client system. This can be achieved by exploiting a directory traversal vulnerability in the NeffyLauncher ActiveX control. The vulnerability can be triggered by including a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. This can potentially be leveraged for code execution by writing to a Startup folder.

Recommendations For version 1.0.5, consider disabling the NeffyLauncher ActiveX control until a patch is available to prevent exploitation of the directory traversal vulnerability. Restrict access to the SkinPath and HttpSkin parameters to minimize the risk of downloading arbitrary code. Avoid using the SkinPath and HttpSkin parameters in the NeffyLauncher ActiveX control until the issue is resolved.

Exploit

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1885

Produtos afetados

Nefficient Download

Referências · 7

• 🔥 https://exploit-db.com/exploits/5397 · Exploit
• http://securityfocus.com/bid/28666 · Nota
• http://secunia.com/advisories/29692 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41743 · Nota
• http://vupen.com/english/advisories/2008/1186 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1885 · Nota de Segurança
• http://seclists.org/bugtraq/2008/Apr/0065.html · Nota