Lucene search

[email protected]CVE-2008-0656

HistoryFeb 07, 2008 - 9:00 p.m.

CVE-2008-0656

2008-02-0721:00:00

CWE-20

[email protected]

web.nvd.nist.gov

cve-2008-0656

unrestricted file upload

emc documentum administrator

remote attackers

arbitrary files

vulnerability

6.9 Medium

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.8%

JSON

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.

Affected configurations

NVD

Node

emcdocumentum_administratorMatch4.2.8

emcdocumentum_administratorMatch5.2.5

emcdocumentum_administratorMatch5.2.5_sp2

emcdocumentum_administratorMatch5.3.0.313

emcdocumentum_webtopMatch5.2.5

emcdocumentum_webtopMatch5.2.5_sp2

emcdocumentum_webtopMatch5.3.0.317

CPENameOperatorVersion
emc:documentum_administratoremc documentum administratoreq4.2.8
emc:documentum_administratoremc documentum administratoreq5.2.5
emc:documentum_administratoremc documentum administratoreq5.2.5_sp2
emc:documentum_administratoremc documentum administratoreq5.3.0.313
emc:documentum_webtopemc documentum webtopeq5.2.5
emc:documentum_webtopemc documentum webtopeq5.2.5_sp2
emc:documentum_webtopemc documentum webtopeq5.3.0.317

CPE	Name	Operator	Version
emc:documentum_administrator	emc documentum administrator	eq	4.2.8
emc:documentum_administrator	emc documentum administrator	eq	5.2.5
emc:documentum_administrator	emc documentum administrator	eq	5.2.5_sp2
emc:documentum_administrator	emc documentum administrator	eq	5.3.0.313
emc:documentum_webtop	emc documentum webtop	eq	5.2.5
emc:documentum_webtop	emc documentum webtop	eq	5.2.5_sp2
emc:documentum_webtop	emc documentum webtop	eq	5.3.0.317

References

secunia.com/advisories/28810

securityreason.com/securityalert/3626

www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf

www.securityfocus.com/archive/1/487603/100/0/threaded

www.securityfocus.com/bid/27632

www.securitytracker.com/id?1019305

www.vupen.com/english/advisories/2008/0439

6.9 Medium

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.017 Low

EPSS

Percentile

87.8%

JSON

Related for CVE-2008-0656

cvelist1 prion1 nvd1