CVE-2008-0457

Currently unrated

Key Information:

Vendor
Symantec
Status
Backupexec System Recovery
Vendor
CVE Published:
7 February 2008

Summary

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

References

https://www.exploit-db.com/exploits/5078
exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/28787
third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/487688/100/0/threaded
mailing-listx_refsource_BUGTRAQ

EPSS Score

7% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.