KLA10054 ACE vulnerability in Akamai Download Manager

Detect date:

06/04/2008

Severity:

Critical

Description:

CRLF injection vulnerability was found in the Akamai Download Manager. By using this vulnerability spiteful abuser can execute arbitrary code. This vulnerability can be exploited from network at point related to unknown. Via specially designed URL.

Affected products:

Akamai Download Manager 2 versions 2.2.3.5 and earlier

Solution:

Update to latest version

Original advisories:

vulnerability description

Impacts:

ACE

Related products:

Akamai Download Manager ActiveX Control

CVE-IDS:

CVE-2008-17709.3Critical

Exploitation:

Public exploits exist for this vulnerability.