1624 matches found
Orbit Downloader URL Unicode conversion buffer overflow
Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...
Orbit Downloader URL Unicode conversion buffer overflow
Added: 07/07/2008 CVE: CVE-2008-1602 BID: 28541 OSVDB: 44036 Background Orbit Downloader is a download manager supporting various protocols. Problem A buffer overflow vulnerability during Unicode conversion in the download failure notification message allows command execution when Orbit Downloade...
Akamai下载管理器参数注入漏洞
CVECAN ID: CVE-2008-1770 Akamai下载管理器是用于帮助用户方便下载的客户端软件。 Akamai的ActiveX控件在处理参数数据时存在漏洞，远程攻击者可能利用此漏洞在用户系统的任意地方写入文件。 当用户从http://dlm.tools.akamai.com/tools/upgrade.html 下载安装Akamai下载管理器ActiveX控件时，其参数设置为： PARAM name="URL" value="http://dlm.tools.akamai.com/toolsfiles/Readme.txt"...
Akamai Download Manager ActiveX code execution
Undocumented properties allow code download and execute...
Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability
Akamai Download Manager File Downloaded To Arbitrary Location Vulnerability by [email protected] http://ruder.cdut.net Summary: A parameter injection vulnerability exists in Akamai Download Manager. By exploiting this vulnerability, the remote attacker can make the users to download...
Akamai Technologies Security Advisory 2008-0001 (Download Manager)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------- Akamai Technologies Security Advisory 2008-0001 Akamai ID: 2008-0002 Date: 2008/04/20 Product Name: Download Manager Affected Versions: 2.2.3.6 Fixed Version: 2.2.3.7 CVE IDs: CVE-2008-1770 CVSS...
Akamai Download Manager ActiveX Control < 2.2.3.6 Arbitrary File Download
The Windows remote host contains the Download Manager ActiveX control from Akamai, which helps users download content. The version of this ActiveX control on the remote host reportedly is affected by a parameter injection vulnerability that could be exploited to download arbitrary files and place...
Akamai Download Manager < 2.2.3.7 ActiveX Remote Download Exploit
No description provided by source. html !-- / Exploit start here, by cocoruderfrankruderathotmail.com For "Akamai Download Manager File Download To Arbitrary Location Vulnerability". This exploit will download "http://ruder.cdut.net/attach/calc.exe" to "C:\Documents and Settings\All Users\Start...
CVE-2008-1770
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...
Crlf injection
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...
CVE-2008-1770
CRLF injection vulnerability in Akamai Download Manager ActiveX control before 2.2.3.6 allows remote attackers to force the download and execution of arbitrary files via a URL parameter containing an encoded LF followed by a malicious target line...
CVE-2008-1770
Summary (CVE-2008-1770): Akamai Download Manager ActiveX control versions before 2.2.3.6 are vulnerable to a CRLF injection via a URL parameter, enabling remote attackers to trigger arbitrary file downloads and potential execution by manipulating the target path. The vulnerability affects the Act...
Akamai Download Manager 2.2.3.7 - ActiveX Remote Download
Akamai Download Manager 2.2.3.7 - ActiveX Remote Download Download Manager window.resizeTo500,510; var bDocReady = false; var bInsObj = false; var isLinux = navigator.userAgent.indexOf"Linux" = 0; var isMacFF = navigator.userAgent.indexOf"Firefox" = 0 && navigator.userAgent.indexOf"Mac" = 0; var...
Akamai Download Manager < 2.2.3.7 - ActiveX Remote Download
Download Manager window.resizeTo500,510; var bDocReady = false; var bInsObj = false; var isLinux = navigator.userAgent.indexOf"Linux" = 0; var isMacFF = navigator.userAgent.indexOf"Firefox" = 0 && navigator.userAgent.indexOf"Mac" = 0; var isSafari = navigator.userAgent.indexOf"Safari" = 0; var...
Akamai Download Manager < 2.2.3.7 ActiveX Remote Download Exploit
Exploit for unknown platform in category remote exploits ================================================================= Akamai Download Manager Download Manager window.resizeTo500,510; var bDocReady = false; var bInsObj = false; var isLinux = navigator.userAgent.indexOf"Linux" = 0; var isMacFF...
KLA10054 ACE vulnerability in Akamai Download Manager
CRLF injection vulnerability was found in the Akamai Download Manager. By using this vulnerability spiteful abuser can execute arbitrary code. This vulnerability can be exploited from network at point related to unknown. Via specially designed URL. Original advisories vulnerability description...
Akamai Download Manager ActiveX控件远程代码执行漏洞
BUGTRAQ ID: 28993 CVECAN ID: CVE-2007-6339 Akamai下载管理器是用于帮助用户方便下载的客户端软件。 Akamai下载管理器的DownloadManager控件没有正确地验证某些对象参数，远程攻击者可能利用此漏洞在用户机器上执行任意指令。 ActiveX控件版本标识如下： 类：DownloadManager Control CLSID：2AF5BD25-90C5-4EEC-88C5-B44DC2905D8B CLSID：FFBB3F3B-0A5A-4106-BE53-DFE1E2340CB1 ProgId：MANAGER.DLMCtrl.1...
DSquare Exploit Pack: D2SEC_AKAMAI
Name| d2secakamai ---|--- CVE| CVE-2007-6339 Exploit Pack| D2ExploitPack Description| Akamai Download Manager ActiveX Control Remote Code Execution Vulnerability Notes|...
CVE-2007-6339
The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...
Code injection
The Akamai Download Manager aka DLM or dlmanager ActiveX control DownloadManagerV2.ocx before 2.2.3.5 allows remote attackers to force the download and execution of arbitrary code via unspecified "undocumented object parameters."...