CVE-2008-1770

2008-06-0421:32:00

CWE-94

[email protected]

web.nvd.nist.gov

crlf injection

akamai download manager

activex control

vulnerability

remote execution

arbitrary files

security

7.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.16 Low

EPSS

Percentile

95.9%

JSON

CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line.

CPENameOperatorVersion
akamai:download_managerakamai download managereq2.0.4.4
akamai:download_managerakamai download managereq2.2.0.0
akamai:download_managerakamai download managereq2.2.1.0
akamai:download_managerakamai download managerle2.2.3.5

CPE	Name	Operator	Version
akamai:download_manager	akamai download manager	eq	2.0.4.4
akamai:download_manager	akamai download manager	eq	2.2.0.0
akamai:download_manager	akamai download manager	eq	2.2.1.0
akamai:download_manager	akamai download manager	le	2.2.3.5