CVE-2007-3256 Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with docu...
MediumCVSS 4.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xythos Enterprise Document Manager (XEDM), Digital Locker (XDL), and possibly WebFile Server before 6.0.46.1 allow remote authenticated users to associate arbitrary Content-Type HTTP headers with documents, which might facilitate malware distribution.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| xythos digital locker | <= 6.0.46.0 | No fix listed |
| xythos enterprise document manager | <= 6.0.46.0 | No fix listed |
| xythos webfile server | <= 6.0.46.0 | No fix listed |
References
- 37614 vdb-entry
- 25783 third-party-advisory
- 2845 third-party-advisory
- 1018291 vdb-entry
- 1018292 vdb-entry
- 20070622 SYMSA-2007-004: Multiple Vulnerabilities in Xythos Server Products mailing-list
- 24521 patch vdb-entry
- www.symantec.com
- xedm-contenttype-extension-spoofing(35086) vdb-entry