132 matches found
CVE-2005-0332
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to 1 upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or 2 delete arbitrary files via the selectfile...
CVE-2005-0332
The CVE-2005-0332 entry concerns DeskNow Mail and Collaboration Server (v2.5.12) with two directory traversal flaws. The first allows remote upload (and possible JSP-based execution) through the AttachmentsKey parameter to attachment.do, enabling files to be placed outside the intended directory....
CVE-2005-0332: Undefined Security Weakness
Directory traversal vulnerability in DeskNow Mail and Collaboration Server 2.5.12 allows remote attackers to 1 upload and possibly execute files outside the directory via the AttachmentsKey parameter to attachment.do, as demonstrated using JSP pages, or 2 delete arbitrary files via the selectfile...
CVE-2004-0650
UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...
CVE-2004-0650
UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...
CVE-2004-0650
Cisco Collaboration Server (CCS) Vulnerability CVE-2004-0650: The UploadServlet in CCS running ServletExec prior to 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. The issue enables remote code execution with network access, reflectin...
CVE-2004-0650: Undefined Security Weakness
UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...
Cisco Collaboration Server (CCS) ServletExec allows arbitrary file uploading
Overview There is a vulnerability in the ServletExec subcomponent of the Cisco Collaboration Server CCS that could allow an attacker to upload arbitrary files to the server. Description The Cisco Collaboration Server CCS is designed to provide interactive customer support web page sharing,...
Cisco Collaboration Server unauthorized access
Unauthorized users can upload any file and gain administrative privileges...
Cisco Security Advisory: Cisco Collaboration Server Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Collaboration Server Vulnerability Revision 1.0 For Public Release 2004 June 30 1600 UTC GMT ======================================================================== Contents ======== Summary Affected Products Details...
