CVE-2008-1368: Code Injection
CRLF injection vulnerability in Microsoft Internet Explorer 5 and 6 allows remote attackers to execute arbitrary FTP commands via an ftp:// URL that contains a URL-encoded CRLF (%0D%0A) before the FTP command, which causes the commands to be inserted into an authenticated FTP connection established earlier in the same browser session, as demonstrated using a DELE command, a variant or possibly a regression of CVE-2004-1166. NOTE: a trailing "//" can force Internet Explorer to try to reuse an existing authenticated connection.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1368?
CVE-2008-1368 is rated as a critical vulnerability due to its potential to allow remote code execution through crafted FTP commands.
How do I fix CVE-2008-1368?
To fix CVE-2008-1368, upgrading to a newer version of Internet Explorer that is not affected by this vulnerability is recommended.
Who is affected by CVE-2008-1368?
Users of Microsoft Internet Explorer versions 5 and 6 are affected by CVE-2008-1368.
What attackers can do with CVE-2008-1368?
Attackers can exploit CVE-2008-1368 to execute arbitrary FTP commands on an authenticated FTP session.
Is there a workaround for CVE-2008-1368?
A temporary workaround for CVE-2008-1368 is to disable FTP access in Internet Explorer until a patch is applied.