PT-2008-5800 · Chilkat · Chilkat Ftp 2.0 Activex

Darkl0Rd · Published 2008-10-15 · Updated 2017-09-29 · CVE-2008-4583

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Chilkat FTP 2.0 ActiveX component (ChilkatCert.dll)

Description The issue is related to an insecure method in the Chilkat FTP 2.0 ActiveX component, which allows remote attackers to overwrite arbitrary files. This is achieved by providing a full pathname in the SavePkcs8File method.

Recommendations For Chilkat FTP 2.0 ActiveX component, consider disabling the SavePkcs8File method until a patch is available to prevent remote attackers from overwriting arbitrary files.

Exploit

Fix

Related Identifiers

CVE-2008-4583

Affected Products

Chilkat Ftp 2.0 Activex

References · 4

• 🔥 https://exploit-db.com/exploits/5028 · Exploit
• 🔥 http://securityfocus.com/bid/27540 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4583 · Security Note
• http://securityreason.com/securityalert/4427 · Note