critical9.3Public exploit code
CVE-2008-4050
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Friendly Technologies - Read/Write Registry/Read Files2008-08-30 · remote · windows · Verified
Impact
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Friendly Technologies | Friendly Pppoe Client | Version 3.0.0.57 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/31644
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334
- http://secunia.com/advisories/31644
- http://securityreason.com/securityalert/4244
- http://www.securityfocus.com/bid/30939
- http://www.securityfocus.com/bid/30940
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
- https://www.exploit-db.com/exploits/6334