CVE-2008-4247

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands…

published September 25, 2008

CVSS
—
EPSS
5%
Percentile
92.5
In the wild
Unconfirmed
What it is

ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05254 · 92.5th percentile
Published
2008-09-25T19:00Z
EPSS history
Timeline
  • 25 SEP 19:00Z
    ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands…
    cvelistv5