CVE-2008-4050

A certain ActiveX control in fwRemoteCfg.dll 3.3.3.1 in Friendly Technologies FriendlyPPPoE Client 3.0.0.57 allows remote attackers to (1) create and read arbitrary registry values via the RegistryValue method, and (2) read arbitrary files via the GetTextFile method.

Score

CVSS 2.0 9.3 Critical

Status

Modified - cve@mitre.org

Published

2008-09-11

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Friendly Pppoe Client (Friendly Technologies)

References

• http://secunia.com/advisories/31644
• http://securityreason.com/securityalert/4244
• http://www.securityfocus.com/bid/30939
• http://www.securityfocus.com/bid/30940
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44787
• https://www.exploit-db.com/exploits/6334