Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
BID:45611
Info
Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
| Bugtraq ID: | 45611 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 29 2010 12:00AM |
| Updated: | Dec 29 2010 12:00AM |
| Credit: | rgod |
| Vulnerable: |
Chilkat Chilkat FTP2 2.6.10 |
| Not Vulnerable: | |
Discussion
Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
The Chilkat FTP2 ActiveX control is prone to multiple insecure-method vulnerabilities.
Successful exploits will compromise affected computers or cause denial-of-service conditions; other attacks are possible.
Chilkat FTP2 2.6.10 is vulnerable; other versions may also be affected.
The Chilkat FTP2 ActiveX control is prone to multiple insecure-method vulnerabilities.
Successful exploits will compromise affected computers or cause denial-of-service conditions; other attacks are possible.
Chilkat FTP2 2.6.10 is vulnerable; other versions may also be affected.
Exploit / POC
Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web document.
The following proof-of-concept is available:
To exploit these issues, an attacker must entice an unsuspecting user to view a malicious web document.
The following proof-of-concept is available:
Solution / Fix
Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Chilkat FTP2 ActiveX Control Multiple Insecure Method Vulnerabilities
References:
References: