Unrated severityNVD Advisory· Published Sep 25, 2008· Updated Jun 16, 2026
CVE-2008-4247
CVE-2008-4247
Description
ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6Patches
Vulnerability mechanics
References
15- www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.y.diffnvdExploit
- www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.c.diffnvdExploit
- ftp.netbsd.org/pub/NetBSD/security/advisories/NetBSD-SA2008-014.txt.ascnvd
- bugs.proftpd.org/show_bug.cginvd
- secunia.com/advisories/32068nvd
- secunia.com/advisories/32070nvd
- secunia.com/advisories/33341nvd
- security.freebsd.org/advisories/FreeBSD-SA-08:12.ftpd.ascnvd
- securityreason.com/achievement_securityalert/56nvd
- securityreason.com/securityalert/4313nvd
- www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpcmd.ynvd
- www.openbsd.org/cgi-bin/cvsweb/src/libexec/ftpd/ftpd.cnvd
- www.oracle.com/technetwork/topics/security/cpuoct2010-175626.htmlnvd
- www.securitytracker.com/idnvd
- www.securitytracker.com/idnvd
News mentions
0No linked articles in our index yet.