CVE-2008-1770: Code Injection
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1770?
CVE-2008-1770 is considered a critical vulnerability due to its potential for remote exploitation and execution of arbitrary files.
How do I fix CVE-2008-1770?
To fix CVE-2008-1770, upgrade to Akamai Download Manager version 2.2.3.6 or later.
What types of systems are affected by CVE-2008-1770?
CVE-2008-1770 affects all versions of Akamai Download Manager up to and including 2.2.3.5.
Can CVE-2008-1770 lead to unauthorized code execution?
Yes, CVE-2008-1770 allows remote attackers to force the download and execution of arbitrary files, leading to potential unauthorized code execution.
Is there a specific attack vector for CVE-2008-1770?
The attack vector for CVE-2008-1770 involves manipulating the URL parameter to include an encoded line feed character, which can invoke harmful commands.