Security Advisory

CVE-2008-4247

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-09-25 19:00:00

Last updated 2024-08-07 10:08:34

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.

← Browse all CVEs View on cve.org ↗