← back
CVE-2008-1724

CVE-2008-1724

EPSS 35.1%
Stack-based buffer overflow in the IActiveXTransfer.FileTransfer method in the SecureTransport FileTransfer ActiveX control in vcst_en.dll 1.0.0.5 in Tumbleweed SecureTransport Server before 4.6.1 Hotfix 20 allows remote attackers to execute arbitrary code via a long remoteFile parameter.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencewww.exploit-db.com/exploits/5398unverifiedexploitdbwww.exploit-db.com/exploits/16563unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/29717http://securityreason.com/securityalert/3806https://exchange.xforce.ibmcloud.com/vulnerabilities/41692https://www.exploit-db.com/exploits/5398http://www.aushack.com/200708-tumbleweed.txthttp://www.securityfocus.com/archive/1/490536/100/0/threadedhttp://www.securityfocus.com/bid/28662http://www.vupen.com/english/advisories/2008/1165/references