PT-2008-5362 · Friendly · Friendlypppoe Client

Spdr · Published 2008-09-11 · Updated 2017-09-29 · CVE-2008-4049

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions FriendlyPPPoE Client version 3.0.0.57

Description The issue concerns a certain ActiveX control in the fwRemoteCfg.dll file, which allows remote attackers to execute arbitrary programs. This is achieved by providing arguments to the RunApp method.

Recommendations For FriendlyPPPoE Client version 3.0.0.57, consider disabling the RunApp method as a temporary workaround until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4049

Affected Products

Friendlypppoe Client

References · 6

• 🔥 https://exploit-db.com/exploits/6324 · Exploit
• 🔥 http://securityfocus.com/bid/30889 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4049 · Security Note
• http://secunia.com/advisories/31644 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44754 · Note
• http://securityreason.com/securityalert/4243 · Note