CVE-2008-0457

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

Link	Resource
http://seer.entsupport.symantec.com/docs/297171.htm	Patch
http://www.symantec.com/avcenter/security/Content/2008.02.04.html	Patch
http://www.securityfocus.com/bid/27487	Exploit
http://secunia.com/advisories/28787	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
http://www.securitytracker.com/id?1019303
http://www.vupen.com/english/advisories/2008/0413	Vendor Advisory
https://www.exploit-db.com/exploits/5078
http://www.securityfocus.com/archive/1/487688/100/0/threaded

Configuration 1

cpe:2.3:a:symantec:backupexec_system_recovery:7.0:*:*:*:*:*:*:* cpe:2.3:a:symantec:backupexec_system_recovery:7.01:*:*:*:*:*:*:*

---

Published : 2008-02-07 09:00

Updated : 2018-10-15 10:00

---

NVD link : CVE-2008-0457

Mitre link : CVE-2008-0457

No products.

CWE-20