CVE-2008-7016 - CVE House

Status published Medium CVE-2008-7016

tnftpd before 20080929 splits large command strings into multiple commands,...

6.8 CVSS

Vulnerability Description

tnftpd before 20080929 splits large command strings into multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks via unknown vectors, probably involving a crafted ftp:// link to a tnftpd server.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7016

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from luke mewburn

View All →

CVE-2004-1294

The mget function in cmds.c for tnftp 20030825 allows remote...

Medium 5

CVE-2004-0794

Multiple signal handler race conditions in lukemftpd (aka tnftpd before...

Medium 5.1

CVE-2002-0768

Buffer overflow in lukemftp FTP client in SuSE 6.4 through...

High 7.5

Affected Vendor

luke mewburn

View all reports →

Affected Software

tnftpd

Vulnerable Versions:

20040810, 20061217, 20080609

Timeline

Official Publish: August 21st, 2009

Last Modified: August 7th, 2024

Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.