漏洞信息详情
emc documentum和WEBtop dmclTrace.jsp 无限文件上传漏洞
漏洞简介
EMC Documentum Administrator 5.3.0.313 和WEBtop 5.3.0.317的dmclTrace.jsp中的无限文件上传漏洞会允许远程攻击者利用文件名属性来反复写入任意文件。
漏洞公告
参考网址
来源: SECTRACK 名称: 1019305 链接:http://www.securitytracker.com/id?1019305 来源: BID 名称: 27632 链接:http://www.securityfocus.com/bid/27632 来源: BUGTRAQ 名称: 20080205 CYBSEC Security Advisory: Arbitrary file overwrite in Documentum Administrator / Documentum Webtop 链接:http://www.securityfocus.com/archive/1/archive/1/487603/100/0/threaded 来源: MISC 链接:http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitrary_file_overwrite.pdf 来源: SECUNIA 名称: 28810 链接:http://secunia.com/advisories/28810 来源: VUPEN 名称: ADV-2008-0439 链接:http://www.frsirt.com/english/advisories/2008/0439 来源: SREASON 名称: 3626 链接:http://securityreason.com/securityalert/3626
受影响实体
- Emc Documentum_webtop:5.3.0.317<!--2000-1-1-->
- Emc Documentum_webtop:5.2.5_sp2<!--2000-1-1-->
- Emc Documentum_administrator:5.3.0.313<!--2000-1-1-->
- Emc Documentum_webtop:5.2.5<!--2000-1-1-->
- Emc Documentum_administrator:5.2.5_sp2<!--2000-1-1-->
补丁
暂无
还没有评论,来说两句吧...