Directory traversal

2009-10-2216:00:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

Low

0.05 Low

EPSS

Percentile

92.9%

JSON

Directory traversal vulnerability in aws_tmxn.exe in the Admin Agent service in the server in EMC Documentum ApplicationXtender Workflow, possibly 5.40 SP1 and earlier, allows remote attackers to upload arbitrary files, and execute arbitrary code, via directory traversal sequences in requests to TCP port 2606.

CPENameOperatorVersion
documentum_applicationxtender_workflow_managerle5.40

CPE	Name	Operator	Version
	documentum_applicationxtender_workflow_manager	le	5.40

References

secunia.com/advisories/37070

www.zerodayinitiative.com/advisories/ZDI-08-095/