CVE-2008-0457

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Symantec Backup Exec System Recovery Manager 7.0 - FileUpload Class Unauthorized File Upload2007-01-05 · remote · windows · Verified
• Backup Exec System Recovery Manager 7.0.1 - Arbitrary File Upload2008-02-07 · remote · windows · Verified

Impact

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://secunia.com/advisories/28787
• http://seer.entsupport.symantec.com/docs/297171.htm
• http://www.securityfocus.com/archive/1/487688/100/0/threaded
• http://www.securityfocus.com/bid/27487
• http://www.securitytracker.com/id?1019303
• http://www.symantec.com/avcenter/security/Content/2008.02.04.html
• http://www.vupen.com/english/advisories/2008/0413
• http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
• https://www.exploit-db.com/exploits/5078
• http://secunia.com/advisories/28787
• http://seer.entsupport.symantec.com/docs/297171.htm
• http://www.securityfocus.com/archive/1/487688/100/0/threaded
• http://www.securityfocus.com/bid/27487
• http://www.securitytracker.com/id?1019303
• http://www.symantec.com/avcenter/security/Content/2008.02.04.html
• http://www.vupen.com/english/advisories/2008/0413
• http://www.zerodayinitiative.com/advisories/ZDI-08-003.html
• https://www.exploit-db.com/exploits/5078