critical10.0
CVE-2008-0656
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arb…
Impact
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Emc | Documentum Administrator | Versions 4.2.8, 5.2.5, 5.2.5_sp2, 5.3.0.313 |
| Emc | Documentum Webtop | Versions 5.2.5, 5.2.5_sp2, 5.3.0.317 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/28810
- http://securityreason.com/securityalert/3626
- http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf
- http://www.securityfocus.com/archive/1/487603/100/0/threaded
- http://www.securityfocus.com/bid/27632
- http://www.securitytracker.com/id?1019305
- http://www.vupen.com/english/advisories/2008/0439
- http://secunia.com/advisories/28810
- http://securityreason.com/securityalert/3626
- http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf
- http://www.securityfocus.com/archive/1/487603/100/0/threaded
- http://www.securityfocus.com/bid/27632
- http://www.securitytracker.com/id?1019305
- http://www.vupen.com/english/advisories/2008/0439