Vulnerability Report

CVE-2008-4652

RCE

Title: Dart Powertcp Ftp For Activex RCE

RCE

Proof Of Concept

PoC Available for CVE-2008-4652

CWE Category CWE-119
Published Date Oct 22, 2008
Modified Date Apr 09, 2025
Exploit Status Available
Score 9.3 CVSS v2.0
Exploit Probability (EPSS)
11.04%

Vulnerability Summary

CVE-2008-4652: Buffer overflow in the ActiveX control (DartFtp.dll) in Dart Communications PowerTCP FTP for ActiveX 2.0.2 0 allows remote attackers to execute arbitrary code via a long SecretKey property.

Impacted Vendors

D
dart 1

Reference Links

http://securityreason.com/securityalert/4458 http://www.securityfocus.com/bid/31814 https://exchange.xforce.ibmcloud.com/vulnerabilities/45975 https://www.exploit-db.com/exploits/6793 https://www.exploit-db.com/exploits/6840 http://securityreason.com/securityalert/4458 http://www.securityfocus.com/bid/31814 https://exchange.xforce.ibmcloud.com/vulnerabilities/45975 https://www.exploit-db.com/exploits/6793 https://www.exploit-db.com/exploits/6840
CVSS v2.0
Source Entity [email protected]
Severity HIGH
9.3
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:M/Au:N/C:C/I:C/A:C

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2008-4652 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/6793
View Code
Exploit-DB https://www.exploit-db.com/exploits/6840
View Code
MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected Stack

No specific products linked.