CVE-2000-1024 eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
eWave ServletExec 3.0C and earlier does not restrict access to the UploadServlet Java/JSP servlet, which allows remote attackers to upload files and execute arbitrary commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| unify ewave servletexec | = 3.0c | No fix listed |
References
- ewave-servletexec-file-upload(5450) vdb-entry
- 1876 patch vdb-entry vendor-advisory
- 20001101 Unify eWave ServletExec upload mailing-list