CVE-2008-0457 Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows rem...
HighCVSS 10.0
EPSS 11.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| symantec backupexec system recovery | = 7.0 | No fix listed |
| symantec backupexec system recovery | = 7.01 | No fix listed |
References
- 28787 third-party-advisory vendor-advisory
- seer.entsupport.symantec.com patch
- 20080206 ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability mailing-list
- 27487 exploit vdb-entry
- 1019303 vdb-entry
- www.symantec.com patch
- ADV-2008-0413 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- 5078 exploit