Vulnerabilities > CVE-2008-4584 - Insecure Method vulnerability in Chilkat Software Mail 7.8

047910
CVSS 6.8 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
chilkat-software
exploit available
NVD
Published: 2008-10-15
Updated: 2017-09-29

Summary

Insecure method vulnerability in Chilkat Mail 7.8 ActiveX control (ChilkatCert.dll) allows remote attackers to overwrite arbitrary files via a full pathname to the SaveLastError method.

Vulnerable Configurations

Part Description Count
Application
Chilkat_Software
1

Exploit-Db

  • descriptionChilkat FTP ActiveX (SaveLastError) Insecure Method Exploit. CVE-2008-1647,CVE-2008-4584. Remote exploit for windows platform
    idEDB-ID:7594
    last seen2016-02-01
    modified2008-12-28
    published2008-12-28
    reportercallAX
    sourcehttps://www.exploit-db.com/download/7594/
    titleChilkat FTP ActiveX SaveLastError Insecure Method Exploit
  • descriptionChilkat Mail ActiveX 7.8 (ChilkatCert.dll) Insecure Method Exploit. CVE-2008-4584. Remote exploit for windows platform
    fileexploits/windows/remote/5005.html
    idEDB-ID:5005
    last seen2016-01-31
    modified2008-01-29
    platformwindows
    port
    published2008-01-29
    reporterdarkl0rd
    sourcehttps://www.exploit-db.com/download/5005/
    titleChilkat Mail ActiveX 7.8 ChilkatCert.dll Insecure Method Exploit
    typeremote

References