PT-2008-5362 · Friendly · Friendlypppoe Client

Spdr · Publicado 2008-09-11 · Atualizado 2017-09-29 · CVE-2008-4049

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FriendlyPPPoE Client version 3.0.0.57

Description The issue concerns a certain ActiveX control in the fwRemoteCfg.dll file, which allows remote attackers to execute arbitrary programs. This is achieved by providing arguments to the RunApp method.

Recommendations For FriendlyPPPoE Client version 3.0.0.57, consider disabling the RunApp method as a temporary workaround until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4049

Produtos afetados

Friendlypppoe Client

Referências · 6

• 🔥 https://exploit-db.com/exploits/6324 · Exploit
• 🔥 http://securityfocus.com/bid/30889 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4049 · Nota de Segurança
• http://secunia.com/advisories/31644 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44754 · Nota
• http://securityreason.com/securityalert/4243 · Nota