CVE-2004-0650 UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
UploadServlet in Cisco Collaboration Server (CCS) running ServletExec before 3.0E allows remote attackers to upload and execute arbitrary files via a direct call to the UploadServlet URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| newatlanta servletexec | = 2.2 | No fix listed |
| newatlanta servletexec | = 3.0 | No fix listed |
References
- 11979 third-party-advisory
- 20040630 Cisco Collaboration Server Vulnerability vendor-advisory
- VU#718896 patch third-party-advisory us-government-resource
- 10639 patch vdb-entry vendor-advisory
- ccs-servletexec-gain-privileges(16553) vdb-entry