Novell ZENworks Configuration Management UploadServlet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks. Authentication is not required to exploit this vulnerability. The specific flaw exists within the ZENworks Server zenserver.exe. This Tomcat server listens by default on TCP ports ...

Novell ZENworks Configuration Management Remote Execution

This module exploits a code execution flaw in Novell ZENworks Configuration Management 10.2.0. By exploiting the UploadServlet, an attacker can upload a malicious file outside of the TEMP directory and then make a secondary request that allows for arbitrary code execution. Module Options msf use...

Unify eWave ServletExec 3.0C file upload

ServletExec has a servlet called SPDX-FileCopyrightText: 2000 Matt Moore Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.10570";...

Unify eWave ServletExec 3.0C file upload

ServletExec has a servlet called 'UploadServlet' in its server side classes. UploadServlet, when invokable, allows an attacker to upload any file to any directory on the server. The uploaded file may have code that can later be executed on the server, leading to remote command execution. OpenVAS...

CVE-2004-0650

Cisco Collaboration Server (CCS) Vulnerability CVE-2004-0650: The UploadServlet in CCS running ServletExec prior to 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL. The issue enables remote code execution with network access, reflectin...

CVE-2004-0650: Undefined Security Weakness

UploadServlet in Cisco Collaboration Server CCS running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL...

Cisco Collaboration Server (CCS) ServletExec allows arbitrary file uploading

Overview There is a vulnerability in the ServletExec subcomponent of the Cisco Collaboration Server CCS that could allow an attacker to upload arbitrary files to the server. Description The Cisco Collaboration Server CCS is designed to provide interactive customer support web page sharing,...

CVE-2001-0308: Improper Control of Generation of Code

UploadServlet in Bajie HTTP JServer 0.78, and possibly other versions before 0.80, allows remote attackers to execute arbitrary commands by calling the servlet to upload a program, then using a ... modified .. to access the file that was created for the program...

CVE-2000-1024: Undefined Security Weakness

eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands...