CVE-2008-7016

tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server.

Link	Resource
http://osvdb.org/48637
http://freshmeat.net/projects/tnftpd/?branch_id=14355&release_id=285654#
http://secunia.com/advisories/31958	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/45534

Configuration 1

cpe:2.3:a:luke_mewburn:tnftpd:20061217:*:*:*:*:*:*:* cpe:2.3:a:luke_mewburn:tnftpd:20040810:*:*:*:*:*:*:* cpe:2.3:a:luke_mewburn:tnftpd:20080609:*:*:*:*:*:*:*

---

Published : 2009-08-21 02:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-7016

Mitre link : CVE-2008-7016

Luke Mewburn

CWE-352