high7.8
CVE-2008-0904
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attacke…
Impact
Unspecified vulnerability in the download servlet in BEA Plumtree Collaboration 4.1 through SP2 and AquaLogic Interaction 4.2 through MP1 allows remote attackers to read arbitrary files via a crafted URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bea Systems | Aqualogic Interaction | Versions 4.2, 4.2_mp1 |
| Bea Systems | Plumtree Collaboration | Versions 4.1, 4.1_sp1, 4.1_sp2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://dev2dev.bea.com/pub/advisory/276
- http://osvdb.org/41881
- http://secunia.com/advisories/28991
- http://www.securitytracker.com/id?1019437
- http://www.vupen.com/english/advisories/2008/0607/references
- http://dev2dev.bea.com/pub/advisory/276
- http://osvdb.org/41881
- http://secunia.com/advisories/28991
- http://www.securitytracker.com/id?1019437
- http://www.vupen.com/english/advisories/2008/0607/references