Login Request a demo
Unscored severity · published Feb 7, 2008
CVE-2008-0457
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0…
–
CVSS
11.9%
EPSS
No
On KEV
Description
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)11.9% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Backupexec System Recovery · Symantec
7.0; 7.01 · source: NVD
Affected product
BS
Backupexec System Recovery
Symantec
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-0457
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-0457
Vendor Advisory
http://secunia.com/advisories/28787
Patch
http://seer.entsupport.symantec.com/docs/297171.htm
www.securityfocus.com
http://www.securityfocus.com/archive/1/487688/100/0/threaded
Exploit
http://www.securityfocus.com/bid/27487
www.securitytracker.com
http://www.securitytracker.com/id?1019303
Patch
http://www.symantec.com/avcenter/security/Content/2008.02.04.html
More from Backupexec System Recovery
–
CVE-2012-0305
Untrusted search path vulnerability in Symantec System Recovery 2011 before SP2 and Backup Exec System Recovery 2010 before SP5 allows local users to gain privileges via a Trojan…
–
CVE-2008-2512
Directory traversal vulnerability in Symantec Backup Exec System Recovery Manager 7.x before 7.0.4 and 8.x before 8.0.2 allows remote attackers to read arbitrary files via…
–
CVE-2007-4347
Multiple integer overflows in the Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allow remote attackers to…
–
CVE-2007-4346
The Job Engine (bengine.exe) service in Symantec Backup Exec for Windows Servers (BEWS) 11d build 11.0.7170 and 11.0.6.6235 allows remote attackers to cause a denial of service…
–
CVE-2007-2359
Buffer overflow in Ghost Service Manager, as used in Symantec Norton Ghost, Norton Save & Recovery, LiveState Recovery, and BackupExec System Recovery before 20070426, allows…