Vulnerability Description
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Emc | Documentum Administrator | 4.2.8 |
| Emc | Documentum Webtop | 5.2.5 |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/28810Vendor Advisory
- http://securityreason.com/securityalert/3626
- http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitra
- http://www.securityfocus.com/archive/1/487603/100/0/threaded
- http://www.securityfocus.com/bid/27632
- http://www.securitytracker.com/id?1019305
- http://www.vupen.com/english/advisories/2008/0439
- http://secunia.com/advisories/28810Vendor Advisory
- http://securityreason.com/securityalert/3626
- http://www.cybsec.com/vuln/CYBSEC-Security_Advisory_Documentum_dmclTrace_Arbitra
- http://www.securityfocus.com/archive/1/487603/100/0/threaded
- http://www.securityfocus.com/bid/27632
- http://www.securitytracker.com/id?1019305
- http://www.vupen.com/english/advisories/2008/0439
FAQ
What is CVE-2008-0656?
CVE-2008-0656 is a vulnerability with a CVSS score of 10.0 (HIGH). Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
How severe is CVE-2008-0656?
CVE-2008-0656 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2008-0656?
Check the references section above for vendor advisories and patch information. Affected products include: Emc Documentum Administrator, Emc Documentum Webtop.