Security Advisory

CVE-2008-7016

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-08-21 14:00:00
Last updated 2024-08-07 11:49:02
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server.