CVE Vulnerability

CVE-2007-3256

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.

4 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 2.9

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

Scope

References
Link Resource
http://www.securityfocus.com/bid/24521 Patch
http://securitytracker.com/id?1018291
http://securitytracker.com/id?1018292
http://secunia.com/advisories/25783
http://securityreason.com/securityalert/2845
http://osvdb.org/37614
http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/35086
http://www.securityfocus.com/archive/1/472275/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:xythos:enterprise_document_manager:*:*:*:*:*:*:*:*
cpe:2.3:a:xythos:webfile_server:*:*:*:*:*:*:*:*
cpe:2.3:a:xythos:digital_locker:*:*:*:*:*:*:*:*
Information

Published : 2007-06-27 06:30

Updated : 2018-10-16 04:48

NVD link : CVE-2007-3256

Mitre link : CVE-2007-3256

Products Affected
No products.
CWE
NVD-CWE-Other