critical10.0Public exploit code
CVE-2008-6937
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a deni…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Exodus 0.10 - URI Handler Arbitrary Parameter Injection (2)2008-11-20 · remote · windows · Verified
- Exodus 0.10 - URI Handler Arbitrary Parameter Injection (1)2008-11-17 · remote · windows · Verified
Impact
Argument injection vulnerability in Exodus 0.10 allows remote attackers to inject arbitrary command line arguments, overwrite arbitrary files, and cause a denial of service via encoded spaces in an xmpp:// URI, a different vector than CVE-2008-6935 and CVE-2008-6936. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jabber | Exodus | Version 0.10 |