PT-2008-3413 · Nefficient · Nefficient Download

Simon Ryeo · Published 2008-04-18 · Updated 2017-09-29 · CVE-2008-1885

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Nefficient Download version 1.0.5

Description The issue allows remote attackers to download arbitrary code onto a client system. This can be achieved by exploiting a directory traversal vulnerability in the NeffyLauncher ActiveX control. The vulnerability can be triggered by including a .. (dot dot) in the SkinPath parameter and a .zip URL in the HttpSkin parameter. This can potentially be leveraged for code execution by writing to a Startup folder.

Recommendations For version 1.0.5, consider disabling the NeffyLauncher ActiveX control until a patch is available to prevent exploitation of the directory traversal vulnerability. Restrict access to the SkinPath and HttpSkin parameters to minimize the risk of downloading arbitrary code. Avoid using the SkinPath and HttpSkin parameters in the NeffyLauncher ActiveX control until the issue is resolved.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2008-1885

Affected Products

Nefficient Download

References · 7

• 🔥 https://exploit-db.com/exploits/5397 · Exploit
• http://secunia.com/advisories/29692 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-1885 · Security Note
• http://securityfocus.com/bid/28666 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41743 · Note
• http://vupen.com/english/advisories/2008/1186 · Note
• http://seclists.org/bugtraq/2008/Apr/0065.html · Note