Lucene search

[email protected]CVE-2007-3256

HistoryJun 27, 2007 - 6:30 p.m.

CVE-2007-3256

2007-06-2718:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

xythos enterprise document manager

xedm

digital locker

xdl

webfile server

cve-2007-3256

nvd

content-type

security vulnerability

malware distribution

6.7 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.

CPENameOperatorVersion
xythos:enterprise_document_managerxythos enterprise document managerle6.0.46.0
xythos:webfile_serverxythos webfile serverle6.0.46.0
xythos:digital_lockerxythos digital lockerle6.0.46.0

CPE	Name	Operator	Version
xythos:enterprise_document_manager	xythos enterprise document manager	le	6.0.46.0
xythos:webfile_server	xythos webfile server	le	6.0.46.0
xythos:digital_locker	xythos digital locker	le	6.0.46.0

References

osvdb.org/37614

secunia.com/advisories/25783

securityreason.com/securityalert/2845

securitytracker.com/id?1018291

securitytracker.com/id?1018292

www.securityfocus.com/archive/1/472275/100/0/threaded

www.securityfocus.com/bid/24521

www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt

exchange.xforce.ibmcloud.com/vulnerabilities/35086

6.7 Medium

AI Score

Confidence

Low

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

69.8%

JSON

Related for CVE-2007-3256

prion1 securityvulns2