CVE-2008-0656: Input Validation
Unrestricted file upload vulnerability in dmclTrace.jsp in EMC Documentum Administrator 5.3.0.313 and Webtop 5.3.0.317 allows remote attackers to overwrite arbitrary files via the filename attribute.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0656?
CVE-2008-0656 has a high severity rating due to its potential for arbitrary file overwriting.
How do I fix CVE-2008-0656?
To fix CVE-2008-0656, update to the latest patched versions of EMC Documentum Administrator and Webtop.
What systems are affected by CVE-2008-0656?
CVE-2008-0656 affects EMC Documentum Administrator versions 4.2.8, 5.2.5, 5.2.5_sp2, 5.3.0.313 and EMC Documentum Webtop versions 5.2.5, 5.2.5_sp2, 5.3.0.317.
What is an unrestricted file upload vulnerability as seen in CVE-2008-0656?
An unrestricted file upload vulnerability allows remote attackers to upload files without proper validation, leading to potential file overwriting.
Who can exploit CVE-2008-0656?
CVE-2008-0656 can be exploited by remote attackers who can manipulate the filename attribute in file upload forms.