critical9.3Public exploit code
CVE-2008-1770
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download2008-06-04 · remote · windows · Verified
Impact
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Akamai | Download Manager | through 2.2.3.5 Versions 2.0.4.4, 2.2.0.0, 2.2.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html
- http://secunia.com/advisories/30537
- http://www.securityfocus.com/archive/1/493077/100/0/threaded
- http://www.securityfocus.com/archive/1/493142/100/0/threaded
- http://www.securitytracker.com/id?1020194
- http://www.vupen.com/english/advisories/2008/1746/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42879
- https://www.exploit-db.com/exploits/5741
- http://lists.grok.org.uk/pipermail/full-disclosure/2008-June/062672.html
- http://secunia.com/advisories/30537
- http://www.securityfocus.com/archive/1/493077/100/0/threaded
- http://www.securityfocus.com/archive/1/493142/100/0/threaded
- http://www.securitytracker.com/id?1020194
- http://www.vupen.com/english/advisories/2008/1746/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/42879
- https://www.exploit-db.com/exploits/5741