CVEvulnerability
CVE-2008-4050
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-20
Description
A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.
Affected configurations
• friendly technologies friendly pppoe client 3.0.0.57
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://secunia.com/advisories/31644 Vendor Advisory
- http://securityreason.com/securityalert/4244 securityreason.com
- http://www.securityfocus.com/bid/30939 www.securityfocus.com
- http://www.securityfocus.com/bid/30940 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6334 www.exploit-db.com
- http://secunia.com/advisories/31644 Vendor Advisory
- http://securityreason.com/securityalert/4244 securityreason.com
- http://www.securityfocus.com/bid/30939 www.securityfocus.com
- http://www.securityfocus.com/bid/30940 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44787 exchange.xforce.ibmcloud.com
- https://www.exploit-db.com/exploits/6334 www.exploit-db.com