CVE-2008-0656

Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2008-02-07

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Documentum Administrator (Emc)
• Documentum Webtop (Emc)

References

• http://secunia.com/advisories/28810
• http://securityreason.com/securityalert/3626
• http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf
• http://www.securityfocus.com/archive/1/487603/100/0/threaded
• http://www.securityfocus.com/bid/27632
• http://www.securitytracker.com/id?1019305
• http://www.vupen.com/english/advisories/2008/0439