CVE

Id
40503  
CVE No.
CVE-2009-3068  
Status
Candidate  
Description
Unrestricted file upload vulnerability in the RoboHelpServer Servlet (robohelp/server) in Adobe RoboHelp Server 8 allows remote attackers to execute arbitrary code by uploading a Java Archive (.jsp) file during a PUBLISH action, then accessing it via a direct request to the file in the robohelp/robo/reserved/web directory under its sessionid subdirectory, as demonstrated by the vd_adobe module in VulnDisco Pack Professional 8.7 through 8.11.  
Phase
Assigned (20090904)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444795 40503 CVE-2009-3068 BUGTRAQ:20090923 ZDI-09-066: Adobe RoboHelp Server Arbitrary File Upload and Execute Vulnerability  View
444796 40503 CVE-2009-3068 URL:http://www.securityfocus.com/archive/1/archive/1/506687/100/0/threaded  View
444797 40503 CVE-2009-3068 MISC:http://blogs.adobe.com/psirt/2009/09/potential_robohelp_server_8_is.html  View
444798 40503 CVE-2009-3068 MISC:http://intevydis.com/vd-list.shtml  View
444799 40503 CVE-2009-3068 MISC:http://twitter.com/elegerov/statuses/3727947465  View
444800 40503 CVE-2009-3068 MISC:http://twitter.com/elegerov/statuses/3737538715  View
444801 40503 CVE-2009-3068 MISC:http://twitter.com/elegerov/statuses/3737725344  View
444802 40503 CVE-2009-3068 MISC:http://www.intevydis.com/blog/?p=26  View
444803 40503 CVE-2009-3068 MISC:http://www.intevydis.com/blog/?p=69  View
444804 40503 CVE-2009-3068 MISC:http://www.zerodayinitiative.com/advisories/ZDI-09-066  View
444805 40503 CVE-2009-3068 CONFIRM:http://www.adobe.com/support/security/bulletins/apsb09-14.html  View
444806 40503 CVE-2009-3068 BID:36245  View
444807 40503 CVE-2009-3068 URL:http://www.securityfocus.com/bid/36245  View
444808 40503 CVE-2009-3068 SECUNIA:36467  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41099 JVNDB-2009-002106 Mozilla Firefox のブラウザエンジンにおける任意のコードを実行される脆弱性 Mozilla Firefox のブラウザエンジンには、サービス運用妨害 (DoS) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2009-3072 40503 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002106.html  View