CVE-2008-0221
Gateway Weblaunch 1.0.0.1 - Remote Code Execution via DoWebLaunch Method Path Traversal
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0221. PoCs published by Elazar.
AI-analyzed exploit summary This exploit leverages an insecure method in the Gateway Weblaunch ActiveX control to execute arbitrary commands by escaping the temporary directory and launching calc.exe. The vulnerability arises from improper path handling in the DoWebLaunch method.
Description
Directory traversal vulnerability in the WebLaunch.WeblaunchCtl.1 (aka CWebLaunchCtl) ActiveX control in weblaunch.ocx 1.0.0.1 in Gateway Weblaunch allows remote attackers to execute arbitrary programs via a ..\ (dot dot backslash) in the second argument to the DoWebLaunch method. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit leverages an insecure method in the Gateway Weblaunch ActiveX control to execute arbitrary commands by escaping the temporary directory and launching calc.exe. The vulnerability arises from improper path handling in the DoWebLaunch method.