Lucene search

MitreCVE-2008-1886

HistoryApr 18, 2008 - 3:05 p.m.

CVE-2008-1886

2008-04-1815:05:00

CWE-310

mitre

web.nvd.nist.gov

neffylauncher

activex control

weak cryptography

cdnetworks

exploit

security vulnerability

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

The NeffyLauncher 1.0.5 ActiveX control (NeffyLauncher.dll) in CDNetworks Nefficient Download uses weak cryptography for a KeyCode that blocks unauthorized use of the control, which allows remote attackers to bypass this protection mechanism by calculating the required KeyCode. NOTE: this can be used by arbitrary web sites to host exploit code that targets this control.

Affected configurations

Nvd

Node

cdnetworksdownload_client

VendorProductVersionCPE
cdnetworksdownload_client*cpe:2.3:a:cdnetworks:download_client:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
cdnetworks	download_client	*	cpe:2.3:a:cdnetworks:download_client::::::::

References

seclists.org/bugtraq/2008/Apr/0065.html

www.securityfocus.com/bid/28666

exchange.xforce.ibmcloud.com/vulnerabilities/41933

www.exploit-db.com/exploits/5397

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

6.9

Confidence

High

EPSS

0.004

Percentile

73.0%

JSON

Related for CVE-2008-1886