CVE-2008-0656 Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
HighCVSS 10.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| emc documentum administrator | = 4.2.8 | No fix listed |
| emc documentum administrator | = 5.2.5 | No fix listed |
| emc documentum administrator | = 5.2.5_sp2 | No fix listed |
| emc documentum administrator | = 5.3.0.313 | No fix listed |
| emc documentum webtop | = 5.2.5 | No fix listed |
| emc documentum webtop | = 5.2.5_sp2 | No fix listed |
| emc documentum webtop | = 5.3.0.317 | No fix listed |
References
- 28810 third-party-advisory vendor-advisory
- 3626 third-party-advisory
- www.cybsec.com
- 20080205 CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop mailing-list
- 27632 vdb-entry
- 1019305 vdb-entry
- ADV-2008-0439 vdb-entry