CVE-2008-0457

CRITICAL 10.0CVE-2008-0457 · Published 07/02/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
backupexec system recovery symantec	`= 7.0= 7.01`	No fix yet

Description

Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.

References

secunia.com/advisories/28787 · Vendor Advisory
seer.entsupport.symantec.com/docs/297171.htm · Patch
securityfocus.com/archive/1/487688/100/0/threaded
securityfocus.com/bid/27487 · Exploit
securitytracker.com/id
symantec.com/avcenter/security/Content/2008.02.04.html · Patch
vupen.com/english/advisories/2008/0413 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-08-003.html
exploit-db.com/exploits/5078

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free