critical9.3Public exploit code
CVE-2008-6936
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a deni…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)2008-11-20 · remote · windows · Verified
- Exodus 0.10 - URI Handler Arbitrary Parameter Injection (1)2008-11-17 · remote · windows · Verified
Impact
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in a pres:// URI, a different vector than CVE-2008-6935.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jabber | Exodus | Version 0.10 |