CVE-2008-0457: Input Validation
Unrestricted file upload vulnerability in the FileUpload class running on the Symantec LiveState Apache Tomcat server, as used by Symantec Backup Exec System Recovery Manager 7.0 and 7.0.1, allows remote attackers to upload and execute arbitrary JSP files via unknown vectors.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0457?
CVE-2008-0457 has a critical severity due to the potential for remote code execution through arbitrary file uploads.
How do I fix CVE-2008-0457?
To fix CVE-2008-0457, it is recommended to update to the latest version of Symantec Backup Exec System Recovery that addresses this vulnerability.
Who is affected by CVE-2008-0457?
CVE-2008-0457 affects users of Symantec Backup Exec System Recovery versions 7.0 and 7.0.1.
What are the potential impacts of CVE-2008-0457?
The potential impacts of CVE-2008-0457 include unauthorized remote access and execution of malicious code on the server.
Are there any mitigations for CVE-2008-0457?
Yes, implementing strict file upload validations and using firewalls to restrict access to vulnerable services can mitigate the risks associated with CVE-2008-0457.