EUVD-2014-4552

Malware in sbrugna...

Extra information for CVE-2014-4626 - EMC Documentum Content Server: authenticated user is able to elevate privileges, hijack Content Server filesystem, execute arbitrary commands by creating malicious dm_job objects

Product: EMC Documentum Content Server Vendor: EMC Version: ANY CVE: N/A Risk: High Status: public/not fixed On April 2014 I discovered vulnerability in EMC Documentum Content Server which allow authenticated user to elevate privileges, hijack Content Server filesystem or execute arbitrary comman...

CVE-2014-4626

EMC Documentum Content Server before 6.7 SP1 P29, 6.7 SP2 before P18, 7.0 before P16, and 7.1 before P09 allows remote authenticated users to gain privileges by 1 placing a command in a dmjob object and setting this object's owner to a privileged user or placing a rename action in a dmjobrequest...

CVE-2014-4626

EMC Documentum Content Server is affected by CVE-2014-4626, allowing remote authenticated users to escalate privileges via manipulation of dm_job objects or dm_job_request objects, potentially affecting 6.7 SP1 P29, 6.7 SP2 P18, 7.0 P16, and 7.1 P09. Root cause noted as an incomplete fix for CVE-...