CVE-2008-4049: Friendly Technologies

Record summary

CVE-2008-4049 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to execute arbitrary programs via arguments to the RunApp method.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBFriendly Technologies - 'fwRemoteCfg.dll' ActiveX Command ExecutionExploitDB exploitby spdrNot analyzed1 file

ExploitDB

PoC details

References

31644Third-party advisory

http://secunia.com/advisories/31644

4243Third-party advisory

http://securityreason.com/securityalert/4243

30889vdb entry

http://www.securityfocus.com/bid/30889

friendly-runapp-command-execution(44754)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/44754

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2008-4049

6324exploit

https://www.exploit-db.com/exploits/6324