CVE

Id
30574  
CVE No.
CVE-2008-0457  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.  
Phase
Assigned (20080124)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
325231 30574 CVE-2008-0457 BUGTRAQ:20080206 ZDI-08-003: Symantec Backup Exec Remote File Upload Vulnerability  View
325232 30574 CVE-2008-0457 URL:http://www.securityfocus.com/archive/1/archive/1/487688/100/0/threaded  View
325233 30574 CVE-2008-0457 MILW0RM:5078  View
325234 30574 CVE-2008-0457 URL:http://www.milw0rm.com/exploits/5078  View
325235 30574 CVE-2008-0457 MISC:http://www.zerodayinitiative.com/advisories/ZDI-08-003.html  View
325236 30574 CVE-2008-0457 CONFIRM:http://seer.entsupport.symantec.com/docs/297171.htm  View
325237 30574 CVE-2008-0457 CONFIRM:http://www.symantec.com/avcenter/security/Content/2008.02.04.html  View
325238 30574 CVE-2008-0457 BID:27487  View
325239 30574 CVE-2008-0457 URL:http://www.securityfocus.com/bid/27487  View
325240 30574 CVE-2008-0457 VUPEN:ADV-2008-0413  View
325241 30574 CVE-2008-0457 URL:http://www.vupen.com/english/advisories/2008/0413  View
325242 30574 CVE-2008-0457 SECTRACK:1019303  View
325243 30574 CVE-2008-0457 URL:http://www.securitytracker.com/id?1019303  View
325244 30574 CVE-2008-0457 SECUNIA:28787  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47349 JVNDB-2008-002659 PHP-Nuke の Search モジュールの index.php における SQL インジェクションの脆弱性 PHP-Nuke の Search モジュールの index.php には、magic_quotes_gpc が無効になっている際、SQL インジェクションの脆弱性が存在します。 CVE-2008-0461 30574 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002659.html  View