PT-2007-4535 · Xythos · Webfile Server+2

Publicado 2007-06-27 · Atualizado 2018-10-16 · CVE-2007-3256

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Xythos Enterprise Document Manager (XEDM) versions prior to 6.0.46.1 Digital Locker (XDL) versions prior to 6.0.46.1 WebFile Server versions prior to 6.0.46.1

Description The issue allows remote authenticated users to associate arbitrary Content-Type HTTP headers with documents. This could potentially facilitate malware distribution.

Recommendations For Xythos Enterprise Document Manager (XEDM) versions prior to 6.0.46.1, update to version 6.0.46.1 or later. For Digital Locker (XDL) versions prior to 6.0.46.1, update to version 6.0.46.1 or later. For WebFile Server versions prior to 6.0.46.1, update to version 6.0.46.1 or later.

Correção

Identificadores relacionados

CVE-2007-3256

Produtos afetados

Digital Locker

Webfile Server

Xythos Enterprise Document Manager

Referências · 10

• http://securitytracker.com/id?1018291 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3256 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35086 · Nota
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-004.txt · Nota
• http://securityfocus.com/archive/1/472275/100/0/threaded · Nota
• http://securityreason.com/securityalert/2845 · Nota
• http://secunia.com/advisories/25783 · Nota
• http://osvdb.org/37614 · Nota
• http://securitytracker.com/id?1018292 · Nota
• http://securityfocus.com/bid/24521 · Correção