PT-2008-1549 · Akamai · Akamai Download Manager

Published 2008-05-01 · Updated 2017-08-08 · CVE-2007-6339

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Akamai Download Manager versions prior to 2.2.3.5

Description The issue allows remote attackers to force the download and execution of arbitrary code via unspecified undocumented object parameters.

Recommendations For versions prior to 2.2.3.5, update to version 2.2.3.5 or later to resolve the issue.

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-6339

Affected Products

Akamai Download Manager

References · 9

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=695 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2007-6339 · Security Note
• http://securityfocus.com/bid/28993 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6339 · Note
• http://secunia.com/advisories/30037 · Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-April/061923.html · Note
• http://securitytracker.com/id?1019955 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42117 · Note
• http://vupen.com/english/advisories/2008/1408/references · Note