CVE-2008-4247 in NetBSD
Summary
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
09/25/2008
Disclosure
09/25/2008
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3837 | NetBSD ftpd cross-site request forgery | 352 | Proof-of-Concept | Official fix | CVE-2008-4247 |